Dependencies
- Upgrade xml-crypto to 2.0.0. HMAC-SHA1 is no longer enabled by default for security
(But it doesn't appear that we were using it, so the major version is not being bumped) - Drop support for Node 8
Bug Fixes
- Only make an attribute an object if it has child elements
- add catch block to NameID decryption (#461)