feat: return exception status and info

[kingluo]

The lua-resty-saml implies a lot of ngx.exit() in codes for exception cases.
Instead, the exit code and related info should be returned to authenticate() caller.