CVE-2016-1000253: onelogin/php-saml signature wrapping attacks · Watchpost