Test saml profile bootstrapping

Also fix the testing mechanism for loading the context with a specific profile.  The active profiles must be set before loading *.xml context resources, otherwise they do not apply.
Only configure the reset password enpoints if neither ldap or saml profiles are active

We can't support password resets directly in these cases
Only show the forgot password link if such a link is specified in login.yml

It was necessary to change the default value of link.passwd from 'https://www.cloudfoundry.com/passwd' to '' to make this feature work.  We don't believe this is an issue, as that link no longer worked anyway.