Update tests to ensure SHA256 digest and signature.
Fix metadata cert spacing to match xmlsec.
Change method for setting AuthnContextClassRef.

Makes it an explicit argument rather than a random class override.