Gracefully handle signature verification failures

[DavisRayM]

Currently, when the package fails to verify whether an SSO is valid it raises an uncaught InvalidSignatureError which is not correctly handled.

Suggestion:

• Print out a help message or helpful error for the user.