Fix LogoutResponse issuer validation and implement SAML Response issuer validation.  Related to Pull Request 116

Review this PR, a solution for the #116 
just double checking, you know better than me