Refactor: esaml_sp and esaml_cowboy_handler

 * Rename handle_consume back to handle_assertion so we can
   add SLO callbacks later

 * Change cowboy_handler to use new esaml_sp

 * cowboy_handler now expects a "/saml/:operation" route
   rather than the old "/saml/[...]"