unused import
finally got saml assertions to verify, as ugly as this is.
optimized interceptor to only run on needed operation