Factor out XML signing code, add SAML 2 Artifact/POST