- If authN context is specified, use that unless it's not a subset of the allowed authN contexts for that RP

- Added default cred support & tested w/ blank notes & override of default
- Parse RP trust notes more carefully
- Fixed RelyingPartySettingsProvider to use field after first call
- RP ID will never be null and other simplifications of _EndRequest