Properly tag IDs to allow for correct validation.

- Recent change in JDK prevents validation if nodes are not tagged.
- See more details here: http://www.rigelgroupllc.com/blog/2013/09/18/validating-saml-tickets-redeux/