Speeded up startup time with more then 1 minute by disabling class scan
Added scoping support based on the client attributes for SAML auth request
Improved error handling - e.g. sending 403s - when something goes wrong like wrong format token
Made the scan jetty performs more restrictive to speed up startup time
Added client attributes to the JS admin client to be able to use this client for possible SAML scoping using the SAML authenticator