Add in test cert and key for service provider.

Allow for testing of encrypted SAML Assertions. Updates spec to reflect
what is actualy getting tested. Note that signatures are hard coded to
sha256 and that the skipped test did not actually verify that the
correct hashing algorithm was used.