correctly validate users that are trusted
correctly get the autolink value
added handling of a logout url in the SAML source