Also add a test to verify that we're loading the config correctly.

Signs SAML assertions for users authenticated via the SSO mechanism.

The proxy wraps endpoints (exposed as separate HTTP hosts) with single-sign-on
authentication.