move parsing into separate method, refresh_metadata will pass specific points to the using app
Name format constant
no more need for #rebuild
protection found from specs, yay tests
test all the things
Add License from ruby-saml since I'm using some of their one login code
specs for xml security converted to spec
Move to a unified License file, naming others