/cas/samlValidate must enforce a required authn_method

https://github.com/Unicon/cas-mfa/issues/20

Note that this scope creeped and goes beyond enforcing required authn_method on `/samlValidate` to also including the authentication methods in the SAML response.  And the attendant need to update the protocol documentation to articulate what the resulting SAML assertions look like.