Updated note about not checking if downstream RP sent required authN context
Added support for required claims