Extra AttributeService test
Significantly simplified SAML Attribute handling.

It turns out that the ESGF AttributeService doesn't use the groupRole type any more.
Attributes are just name/value pairs so we can do away with FriendlyName and URNs.
Support attributes with multiple values