use current version of opensaml library
extracted interceptors
minor cleanup
factory methods to create the HttpClient (will later get rid of the
ShibHttpClient class completely)
abstracted authentication to be able to support more than just BASIC
auth
further cleanup - avoid dependency just for tracing