bergie/passport-saml — pull request #16 by herby (2013-09-17 09:55:12+00:00)
Title: Inflating redirect response

Allows to call `authenticate` not only for Post but also for Redirect responses (typically, logout responses are redirect).
TODO: Redirect responses are not verified, it needs different code than for Post case.