fixed: saving SAML attributes on login