Fix windows auth with wsfed.
- If we're using windows auth then 302 before the wsfed module can run.
- Added new claim for partial identities so it doesn't happen for windows auth.