If SP metadata indicates "want_assertions_signed", then verify that they are signed.
Merge pull request #56 from rectalogic/want-assertions-signed

If SP metadata indicates "want_assertions_signed", then verify that they are signed