Make sure GetAuthenticatedAccountId() returns a canonicalized id.

chrome/browser/policy/cloud/user_policy_signin_service.cc

Index: chrome/browser/policy/cloud/user_policy_signin_service.cc
diff --git a/chrome/browser/policy/cloud/user_policy_signin_service.cc b/chrome/browser/policy/cloud/user_policy_signin_service.cc
index e39ccc6cf5894cd5812f458dd0bf4ced26f1f239..d49698fa18d9eebd7716aa025c055a8eea938977 100644
--- a/chrome/browser/policy/cloud/user_policy_signin_service.cc
+++ b/chrome/browser/policy/cloud/user_policy_signin_service.cc
@@ -42,8 +42,9 @@ UserPolicySigninService::UserPolicySigninService(
   // ProfileOAuth2TokenService should not yet have loaded its tokens since this
   // happens in the background after PKS initialization - so this service
   // should always be created before the oauth token is available.
-  DCHECK(!oauth2_token_service_->RefreshTokenIsAvailable(
-             signin_manager->GetAuthenticatedAccountId()));
+  DCHECK(!signin_manager->IsAuthenticated() ||

[Andrew T Wilson (Slow), 2014/10/07 16:31:23]

Why is this required - does RefreshTokenIsAvailable() return an error if we
aren't yet authenticated?

[Roger Tawa OOO till Jul 10th, 2014/10/07 19:37:34]

Previously, you could call RefreshTokenIsAvailable() with an empty string and it
would return false.  However, in this CL I added checks to all public api of the
token service to validate the account_id.  One of the validation checks is that
the account_id is not empty.

This required a few tweaks to callers to fix tests, see ps9 and ps11.

You could argue that this validation should not be done in
RefreshTokenIsAvailable(), only the other public api calls of the token service.
 I think its good as is, but if you feel strongly that RefreshTokenIsAvailable()
should not validate the account_id, I can remove it.

[Roger Tawa OOO till Jul 10th, 2014/10/08 19:47:29]

I've decided to remove the validity check only from  RefreshTokenIsAvailable(). 
It was causing a lot of failures because there is code that passes an empty
string to RefreshTokenIsAvailable() as a test to see if the profile is signed
in.  I'll keep the check for all O2TS calls that would mutate the token service.
 As a result, I undid changes to user_cloud_policy_token_forwarder.cc,
user_policy_signin_service.cc, and auth_service.cc.

+         (!oauth2_token_service_->RefreshTokenIsAvailable(
+              signin_manager->GetAuthenticatedAccountId())));
 
   // Listen for an OAuth token to become available so we can register a client
   // if for some reason the client is not already registered (for example, if