Update to shibboleth role and allow changing the template directory

I found when trying to implement this role for us, our attributes and shibboleth2 configs were to different to reconcile, so I added a flag to allow overriding the template directory to provide further customization. This is similar to #339 and #836 

@jbau and @sefk to double check there aren't any side effects introduced for you.