Add support for forcing SAML authentication before authorize

Add code + configuration to send the user to a SAML provider before authorizing. Needed to support Dev Portal logins to APImatrix in BF 3.0.