Function resolve_subject 

pub fn resolve_subject(
    surface: GatewayOAuthSurface,
    configured_subject: &str,
    caller_supplied_subject: Option<&str>,
) -> Result<GatewaySubject, GatewayOAuthError>