Make signature verification more loose with trust chain verification.

Since SAML uses pre-exchanged certs, the trust chain is less useful anyways. Go back to xml_security.rb since it removes some integration woes.