SAML principal attribute release must pass through the policy

This pull request addresses issue #639
Good idea. Just did that.

So views.xml is now being bundled with the saml JAR, and loaded from classpath. There is a prop to override the default file on classpath if there is a need to override views or their settings, etc.