Add Single Logout support to examples and fix some bugs

As best as I can tell, I've gotten Single Logout Service working with the example SP and IdP. I've tested against Shibboleth, so I think I've gotten the protocol working correctly. Along the way, I turned on signing logout requests in the example as it's possible to configure Shibboleth to require signing. I haven't added any unit tests though.