encode the failure response for saml 2 authnreq