refactor to get saml config on the fly
recreate Saml object properly each time we're called
change where we look for configuration
bump version number
more configuration changes
validate issuer of response by config, not session variable
replace & to &amp; in saml XML
pass options to _verify callback
xpath wasn't being called correctly
add easy way to check auth response signatures