update to saml 0.4.0 that puts signature after Issuer and bump to 0.4.0