#502: saml authn attributes dont appear in validation response

This PR fixes issue #502
I don't see that we were returning authentication attributes previously: it's new, isn't it?