* Remove 404 link to SSP news; this is covered on simplesamlphp.org now.
* Make screenshots link relative, so docs don't trigger insecure
  content warnings.
* Compress png images.

(being respectful with occurences that might change the behaviour, i.e. default database prefixes)

This reverts commit 09c5a23f.

SHA-1 is still supported but needs to be configured explicitly if you need it.

Revert the new configuration option for the core:PHP authproc. Since we need to serialize authprocs and SP metadata in the state array, and closures are not serializable, it doesn't work. We could create a new module with this, adding a dependency on opis/closure 2.0.* or equivalent, to be able to serialize closures.

Added support for the full SCHAC 1.5.0 schema, including new attribute mappings between the old namespace in TERENA and the new urn:schac namespace.

Deprecate SimpleSAML_Default::initLogin() and move it to SimpleSAML_Auth_Source as a non-static method.

Move SimpleSAML_Auth_Default::handleUnsolicitedAuth() to sspmod_saml_Auth_Source_SP::handleUnsolicitedAuth() and deprecate the former.

Move SimpleSAML_Auth_Default::extractPersistentAuthState() to SimpleSAML_Auth_State::extractPersistentAuthState() and deprecate the former.

Add a 'hide.from.discovery' configuration option for remote IdP metadata. This allows to hide an IdP from the discovery service. Defaults to false, so every IdP in the metadata that doesn't have this option set to true will be listed.

SimpleSAMLphp no longer requires mcrypt, it will only be needed depending on the configuration, so mark it as optional.

As per https://groups.google.com/forum/#!topic/simplesamlphp/nFXerlX839E

The text was copied from https://code.google.com/p/simplesamlphp/wiki/LostState, corrected some language and added a piece on http/https stemming from the comments on that page.

Fixes #214