Support PEM formatted service provider certificates through the configuration

There's no need to rebuild the war to configure the SAML login server.