Fix security issue when using bypassShib in Shibboleth module

It is possible in certain cases for anyone to who knows a valid user name to log in to webwork course without knowing a correct password.