implement auth against simplesaml