v1.4.0

Dependencies

• Upgrade xml-crypto to 2.0.0. HMAC-SHA1 is no longer enabled by default for security
  (But it doesn't appear that we were using it, so the major version is not being bumped)
• Drop support for Node 8

Bug Fixes

• Only make an attribute an object if it has child elements
• add catch block to NameID decryption (#461)

Internals

• Add GitHub Actions as Continuos Integration provider (#463)
• try to use curl when wget is not available (#468)
• support typescript compilation