Move token validation into SAML library, first draft SAML 1 SSO handler.