requested_authn_context: authn_context_class_ref should be a list