Made the SURFconext settings IDP metadata refresh optional.
Fixed warning during install.
Made attributes configurable.
Not allowed to change passwords for surfconext users.
Calling hook_user_logout here, causes a endless loop.