fix resign SAML assertion attack