Bugfix: SPNameQualifier was not set EPPN.
Bugfix: Revert AuthenticatingAuthority back to old behaviour, with surprising consequence that AA of EB gets added in VO mode
Bugfix: Input filtering should use Response by reference because otherwise changed to substructures like attributes will be done by-value instead of by-reference.