Assertions signature is not verified when the response is signed

[blnvdanil]

Hello, thanks for this awesome library.

I have noticed, thath this commit introduced a behavior change
9957448

Previously, signature of the Response and Assertions was checked, but now if the Response is signed, signature of the Assertions wont be checked. Is it intended change?

[ahacker1-securesaml]

Yes, response signature covers it's assertions. So checking assertions signature will be redundant.