* A 2.4 PR of 2575 to see what the CI makes of it in that env.

#2575

* it seems that the number of attempted paths in included in the count

* Update changelog with NameIDType JSON serialization

2.4.4 included a bump in the saml2-legacy dependency which changes the structure of how some attributes would be json-serialized. This MR just includes a line in the changelog to call this out explicitly

* Corrected version for notes about change in NameIDType JSON serialization

The change in JSON serialization was in 2.4.3 not 2.4.4

* Bugfix: don't set illegal combination of AllowCreate/Format

* Force allowCreate to false if format is TRANSIENT

I also kept a reference to the errata 05 page/line here in a comment

* allowCreate is true by default and contained for TRANSIENT

As the default was true for this before it is now that way again. If
the format is NAMEID_TRANSIENT it will be set to respect the Errata 05.

* The persistent default is back to having allowCreate=true

---------

Co-authored-by: Ben Martin <monkeyiq@users.sourceforge.net>