changed sign_assertion value domain to allow more than 2 values (values was previously ignored anyway); added "sign_response" key.
change options "sign_asertion" and "sign_response" to be dependent on their value, not just on their existence (previously "sign_response=False" would still generate a response signature). Change from boolean to string, to allow for future optional signatures (e.g. like in shibboleth: sing on front channel, but not over https/soap)
make dsgi algorithms configurable (config args.AuthnResponse.sign_signature_alg etc.)
add default dsig algorithms (config args.AuthnResponse.sign_signature_alg etc.)
change "name" values in test cases to a single string, because output formatting is more difficult with lists.
reordered sp-08