The default values are fine if no other applications use PHP sessions. However, when other apps are using PHP sessions, a conflict arises with the defaults, so let's try to make the defaults a bit more resilient.

Frequently people put fs paths in baseurlpath or URL paths in
the other settings. By more clearly separating these two classes
of options I hope to reduce confusion a bit.

`core:ScopeFromAttribute` is a generalised version of this.

Closes: #512

Also add some docs.

- Attributes which can be get from LinkedIn are now configurable
- By default these attributes are requested: id,first-name,last-name,headline,summary,specialties,picture-url,email-address
- Added email-address attribute into the default set
- Fixed link to the documentation

Some things, like logging of SAML messages or backtraces, are controlled with the 'debug' configuration option. However, it might be possible that we don't want one while we want the other, but that's impossible with just one option.

This commit allows us to configure debugging options independently, but groupping all of them together. This is particularly useful if we want to log backtraces to debug errors, for example, but we don't want to log SAML messages to keep the privacy of the users. This also allows us to get rid of the 'debug.validatexml' configuration option, and group it with other debug options.

This changes are backwards-compatible. Old and new configurations will work at the same time.

Add the existing Afrikaans translation into the list of supported languages so that South African users don't need to go editing code.

Add a configuration option named 'admin.checkforupdates' to enable or disable this feature.

rather than the discontinued OAuth WRAP. Attributes are now retrieved
from the Microsoft Graph API rather than the Messenger API.

Remove config templates that are no longer used. They are creating confusion and serve no purpose after all.

Update the documentation. Trailing slashes are no longer required for 'baseurlpath'. This resolves #363.

Fixes #379

- Exception messages and backtraces are now decoupled, so that they can be logged independently.
- Backtraces are now logged with "debug" log level, and only in case the "debug" configuration option is set.
- A new log() method allows the exception itself to decide which log level to use. This can be used by exceptions overriding this method to change the log level accordingly.
- Add a new parameter to the format() method so that the formatted message is anonymized, safe for display in the browser.

Additionally, this resolves #281.

Move SimpleSAML_Metadata_MetaDataStorageHandlerMDX to SimpleSAML\Metadata\Sources\MDQ, and stop referring to it as MDX elsewhere.

Minor changes to use SimpleSAML namespace to Logger logging level definitions.

A template now has a translator-object, SimpleSAML_Locale_Translate.
This handles the existing translation system.

The translator has a language-object, SimpleSAML_Locale_Language. This
handles discovery and switching of locale.

SimpleSAML_XHTML_Template has several methods that are wrapped
translator-methods:

t()
isLanguageRTL()
getLanguageList()
getTranslation()

This way it isn't necessary to change much of the existing system.

(being respectful with occurences that might change the behaviour, i.e. default database prefixes)

This reverts commit 09c5a23f.

SHA-1 is still supported but needs to be configured explicitly if you need it.

Prevent data-collision when hosting several SSP-instances on one machine, when more than one is using memcache.

Introduces new config setting 'memcache_store.prefix'.