add a hook to modify returned attributes.

[anthonybaxter-uwu]

Some SAML IdP's return non-standard SAML responses, for instance under some circumstances keyclock won't return a uid. Add a hook to allow attributes to be modified on the fly.