Extended support for CAS 3.0 / SAML 1.1 attributes.
- Support multi-valued attributes for name/email (use first).
- Support multiple attributes for group membership.