Add tests for Name ID functionality
    
    Some Name ID formats are not implemented so are expected to fail.
    
    Kerberos is implemented but the test is done using form authentication
    so no Kerberos principal is available so authentication is denied.
    
    https://fedorahosted.org/ipsilon/ticket/27
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    Reviewed-by: Simo Sorce <simo@redhat.com>