request object delegate to this object from controller mixin
need to use method not instance var
line endings
start adding general SAML stuff, may want a parent gem for this
force array the list on NameIdFormatter
convert to XPath over hash interpretation
whitespace and cleanup
add SP finder config option
validate SP exists, forbidden if not found or signed correctly
use constants for URI namespaces
fake render for the controller spec
switch up service provider config
httparty:
service provider object
new document class specific to SAML xml, push sign checking to that, go through SP to pass 'my' fingerprint
move parsing into separate method, refresh_metadata will pass specific points to the using app
Name format constant
no more need for #rebuild
protection found from specs, yay tests
test all the things