CXF-6054 add a property to allow unsigned saml tokens