Fix LogoutResponse issuer validation and implement SAML Response issuer validation.  Related to Pull Request 116

Review this PR, a solution for the #116 
why are these commented out?