Adding attribute functionality to testbed

[Cantor, Scott]

Rod, do you think you could take some time soon and start laying out beans
and config files for the resolver (and maybe filter) code in the testbed?

I forgot one TODO, which was to allow a subflow during authentication that
runs the resolver. Plus with the testbed, we can probably get to a point
of exercising the resolver faster than via command line.

-- Scott