DS-1503 use getAttribute first before attempting to check getHeader for
the user value. ShibUseHeaders is not enabled by default in Apache.