Add a README file in the Shibboleth auth strategy that explains the entire authentication flow and reasons behind it