Fix logging of re-sorted creds.
Add default eduPersonScopedAffiliation if not set.

This adds the possiblity to configure a default
eduPersonScopedAffiliation that will be inserted into the
list of user attributes if none is present already.

This could/should be turned into a much more generic feature later
on, but this solves the identified need for now.
bugfix: Look for verify_request_signatures in the right config object.
Merge pull request #6 from SUNET/default_scoped_affiliation

Default scoped affiliation