Fix LogoutResponse issuer validation and implement SAML Response issuer validation.  Related to Pull Request 116

Review this PR, a solution for the #116 
all your other comments came above the code, rather than under - lets keep this consistent, especially since this is documentation