Fix ?renew=foo support for CAS

URL whitelist for service/unsigned app_ids

Multiple attribute sources:
	AselectAttributePolicy default
		urn:mace:dir:attribute-def:uid ldap:uid
		urn:mace:dir:attribute-def:anr ldap:employeeNumber
		urn:mace:dir:attribute-def:mail ldap:mail
		urn:mace:dir:attribute-def:sn ldap:sn
		urn:mace:dir:attribute-def:givenName ldap:givenName
		urn:mace:dir:attribute-def:eduPersonEntitlement ldap:eduPersonEntitlement
		urn:mace:dir:attribute-def:eduPersonPrincipalName ldap:eduPersonPrincipalName
		urn:mace:terena.org:schac:schacHomeOrganization const:uvt.nl

$Id: TODO 35498 2011-09-02 14:34:30Z wsl $
$URL: https://infix.uvt.nl/its-id/trunk/sources/aselect-perl/TODO $
