fixes for saml 2 authnreq