CAS-1238 Add MFA unit test for credential upgrade via renew case.

Demonstrate that it is possible to satisfy authentication policy for an
SSO session where the credential authenticated at SSO session start is
insufficient but upon granting a service ticket via renew with stronger
credentials the security policy can be satisfied.