Updated geoxacml to use HERAS-AF and added saml2auth

* updated geoxacml to use HERAS-AF instead of sunxacml
* moved common XACML components (functions & types) to geoxacml-common
* created a SAML2 auth filter