Update SAML backend metadata configuration

In the first batch of changes according to the feedback by PB (not this one), we add the possibility to validate the metadata against a configurable certificate file.