Make NameIDPolicy optional in AuthRequest

As mentioned in #21, this node can cause problems with some IdPs. This and the corresponding config update in SamlSPBundle allows it to be suppressed if necessary.

Let me know if you'd rather approach it differently.