fixes on saml2
add recipient option