We have noticed the same with CAS 7.1
We are using delegated authentication with different external SAML IDPs.
It seems like every login causes new org.opensaml.saml.metadata.resolver.impl.FilesystemMetadataResolver instances to be created which in turn create a new timer thread.