fix Issuer template
add signing cert to idp metadata