Allow SAML to set user attributes via additional attribute
statements in the SAML response. These allowed attributes are
currently limited to `can_create_group` and `projects_limit`.