Issue #658: SAML validation now forcing service match

This fixes https://github.com/Jasig/cas/issues/658