add saml metadata to protocol interpreter
add NameIDPolicy to AuthnRequest
check for idp certificate before trying verification
regenerate "docs"
bump version