sign authn and logout requests in the example
SPEC says SP AssertionConsumerService cannot support HTTP-Redirect

This is according to the SAML2 spec, section 4.1.2.
whitespace cleanup
Use a better error message if we find a non-existing session
Use the same nameid_format in Saml2Client.prepare_for_authenticate