Allow redirect hosts whitelist

[cochiseruhulessin]

Created a setting to specify which domains are allowed for SAML2 redirects with POST binding.

Our use case was local development with a React client.