[rwth-security] Node.js passport-saml - Signature bypass via multiple root elements