add settings to facilitate Shibboleth debugging

Shibboleth issues can be hard to debug, as the current codebase uses global settings like Play.Mode (which enables or prevents debugging) to determine whether to mock Shib or the global logging level to determine whether or not to construct strings to view request headers. This patch adds distinct settings that affect Shibboleth behavior, while endeavoring to minimize impact to other parts of the code.