How do I set up a SAML 2.0 addon that validates signed requests?