CASC-206 Added Authentication Redirect Strategy to support original use case and new Faces support

This seems to have pulled in code that I thought had already been merged back. A minor fix to multi-valued support.  Apologies for the double-pull request.