Is it possible for a samlToken to have NULL assertion? There is an assumption in the code that it is not possible. I am just checking.