Signed Response: correctly interpret blank URI attr

That indicates the whole document is signed:
http://msdn.microsoft.com/en-us/library/system.security.cryptography.xml.reference.uri.aspx