v0.4.0

• Changing default samlFallback to login-request, since that is almost certainly the right thing and otherwise we are fairly broken by default -- #41
• Tolerate missing format attribute in subject names -- #40
• If callback protocol is not specified, use the protocol in the request -- #43, #42