Make it easier to relax the AudienceRestriction requirement for OnBehalfOf SAML Tokens

git-svn-id: https://svn.apache.org/repos/asf/cxf/branches/2.7.x-fixes@1522519 13f79535-47bb-0310-9956-ffa450edef68