Issue 609: CAS OAuth Support 3.5.2 - 'service' query parameter is not being restored correctly

This is a curious change; `https://test.scaldingspoon.org/idp/shibboleth` is there on purpose "because" it contains a missing cert. The cert itself is located in the truststore, which serves to prove that imports into the local CAS truststore can be loaded with certs are missing. Otherwise, your test looks just like the one above it. 

If you list the certs in the truststore.jks file you'd see the missing cert for the scaldingspoon site as well as we the one for cacert.org