Ticket #19 (enhancement)

The http://myvocs-box/tools page presents a printenv.pl and sample.txt page under the /tools/secure path that require authn to access. With the default shibboleth configuration these tools are protected by the "internal" shibboleth config, that is they will show values and base decisions on the attributes asserted by the vo idp. This is OK.

There needs to be an equivalent for external authn as well, eg. /tools/secext that is protected but only requires authn from external idps. This can be done with the extra dir and with a rule in the /etc/shibboleth-sp/shibboleth.xml to tie it into the external authn camp.