comment out invalid signature check temporarily; added isSuperAdmin based on isSuper set by saml attribute