further documentation - auto roles

how the simplesaml populates roles and how it applies to our needs
add url describing fields