Bug fixing - round two... now with working shib SSO