Match WantAuthnRequestsSigned to 'sign.authnrequest' option instead of 'redirect.sign' when parsing IdP metadata.
Set WantAuthnRequestsSigned in the generated IdP XML metadata if validate.authnrequest or redirect.validate options are set in saml20-idp-hosted metadata (with that order of precedence). Fixes #43.