Single sign-on is often safer, but it ties many apps to one “master” account. Here's how to secure it well and revoke old app access to reduce risk.