We now always insert userinfo_signed_response_alg into the client information, but the check whether signing needs to happen is done as a "if .. in ..", meaning it's not possible to not request signing.
Metadata Update from @puiterwijk: - Issue assigned to puiterwijk
Metadata Update from @t0xic0der: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)