add new options (allowed_clock_drift, validation_error)

For debugging SAML related errors.