SimpleSAMLphp no longer requires mcrypt, it will only be needed depending on the configuration, so mark it as optional.

As per https://groups.google.com/forum/#!topic/simplesamlphp/nFXerlX839E

The text was copied from https://code.google.com/p/simplesamlphp/wiki/LostState, corrected some language and added a piece on http/https stemming from the comments on that page.

Fixes #214

It has never really gained traction and is now superseeded by the composer module installer.

Rename SimpleSAML_Session::getInstance() to SimpleSAML_Session::getSessionFromRequest(), and leave the former as deprecated.

This is more than just cosmetics, as the rnd.feide.no links redirect
people to the SSP 1.5 documentation which is rather outdated.

Remove 'saml2.relaxvalidation' option from documentation. This feature was removed back in 2009. Fixes #78.

Blacklist 'http://www.w3.org/2001/04/xmlenc#rsa-1_5' (RSA encryption with PKCS#1 v1.5 padding) by default.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3408 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3396 44740490-163a-0410-bde0-09ae8108e29a

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@3395 44740490-163a-0410-bde0-09ae8108e29a