sign saml assertion