explicity set 'destination' to 'acs' so it isn't set to 'audience'

Compliance with Section 3.4.5.2 of the saml-bindings-2.0-os specification.