Add Issuer validation to new ValidateTokenAsync() flow in both SamlSecurityTokenHandler and Saml2SecurityTokenHandler.