added whitelist/blacklist to issuer services
added extension mechanism for saving client information in between runs
automatic save file creation
fixed auth header

addresses #325
switched to using UriComponents instead of custom class, updated normalization and processing rules for webfinger discovery

addresses #363
moved back to custom regex to handle user input