Node-saml Root Element Signature Bypass

Node-saml and its partner project passport-saml are vulnerable to an authentication bypass due to lax parsing of SAML responses.