fixes redirect initiation for targets that already have ...

... some query string predefined

Allow for passive IdP, for example, by adding `?IsPassive=true`.

Without this, `search` has precedence over `query` so no SAML attributes are rendered in final URI.