added encrypt assertions to response
bumped version
allow assertions to be signed before encryption
bumped version