Add checkbox to require assertions to be signed, Add checkbox to run OneLogin/php-saml in 'strict' mode.

When going to the admin page for SAML Authentication under the security checkboxes there is an option to require signed messages, but not an option to require signed assertions.

They sign the assertions and not the messages with the current IdP I am working with. It would be helpful to have an additional checkbox under security, something like 'Request assertions to be signed'. If you checked it the SAML Onelogin settings would get 'wantAssertionsSigned' => TRUE. This would provide an additional security check.

It would also be good if you could set the 'strict' OneLogin/php-saml option from this admin page also. This is always supposed to be switched on in production environments and it would be good if you could set this from a variable or through the GUI.