Merge pull request #249 from simong/authz-reduce-query

`hasRole` and `hasAnyRole` both perform one more query than necessary
Merge pull request #342 from simong/issue-342

Improve test coverage for oae-util
Shibboleth authentication