Enforce SP registration in IdP

[nick96]

Currently you don't actually need to register an SP with an IdP. To make it a more authentic SAML experience we should enforce this. All that needs to be is store the SPs associated with an IdP. I think it would be better to store this as another tree (for the memory store) rather than in the IdentityProvider structure because we don't always care about the association.