MinIdp.Server controller assumes MinIdp security manager at the app level. This must be revised

[JohnPKosh]

We need to have an ability to run IDP server off another security manager which can be used to secure the IDP server itself. That security manager may or may not BE THE SAME.