Attempted SSO

Store the fact that we've attempted SSO before in the session rather than in a cookie.