Commit 7d61010

@@ -1,5 +1,5 @@
 class BearerToken
-  def initialize(private_key = Saml::Kit.configuration.signing_private_key)
+  def initialize(private_key = Saml::Kit.configuration.private_keys(use: :signing).last)
     @private_key = private_key
     @public_key = private_key.public_key
   end

@@ -20,6 +20,7 @@ describe SessionsController do
     it 'renders an error page when the service provider is not registered' do
       post :new, params: saml_params
       expect(response).to have_http_status(:forbidden)
+      expect(response.body).to include("Forbidden")
     end
 
     it 'renders the login page when the service provider is registered and the user is not logged in' do