Custom certificate path option for identity chooser dialog

[d47081]

Following specification line limit certificate applied to the path where authorization happen:

The scope of a certificate generated in response to this status code should is limited to the host and port from which the status code was received and the path of the URL in the original request plus all paths below it.

e.g. /register instead of ?register will drop authorization for entire host root

Could be resolved by mask or ability to apply entire domain with checkbox in the identity dialog