added Saml::AuthnRequest :is_passive attribute