Failing test case for XSW attack
handle XSW case
remove signature#verified?
only verify the signature if it isn't missing and location is called
whitespace
signatures must have a reference, add a test for the location
don't allow duplicate saml:Assertion nodes at all