This reverts commit 9e98109b.

This prevents a lot of -dev dependencies in composer.lock which are
not used otherwise and generate 'scary' warnings like "Package x is
abandoned".

Closes #718

This reverts commit b9f92f33.

This reverts commit 82a46a7c.

This removes the dependency on mcrypt for good, closes #660 and resolves #615.

I believe #592 broke unit tests by adding a dev-dependency to
`composer.json` but forgot to update `composer.lock`. Therefore,
`composer install` does not install all the necessary dependencies for
tests.

This enables too the implementation of additional contact attributes, as requested in #509 to support the SIRTFI framework.

Update test notes to point to the 4.8 documentation and describe
how to run an old version of phpunit from composer's bin dir.

Now that the SAML2 library has been updated to use the new SimpleSAML\Logger, we can update the dependency here. Since both libraries are interdependent, we are pointing to a specific commit in master, aliasing it to 2.2. That way we can keep business as usual for any other package which may depend on 2.2, while getting the changes into SimpleSAMLphp.