Spring Security TestSaml2X509Credentials should only return Saml2X509Credential instances

TestSaml2X509Credentials always exposes a list of credentials when the majority of tests only need one credential. Changing these methods to only return one credential each will simplify tests. Tests that need more than one credential can simply create more than one and add them to the list.