Allow overriding RequestedAuthnContext in metadata.

Apparently, there are situations where some SPs can't supply
RequestedAuthnContext. This addition checks for an entity
attribute "http://www.swamid.se/assurance-requirement" in the
metadata.