Added information to the error page about why auEduPersonSharedToken is invalid

Try to be as descriptive as possible about which requirements they have
broken, in the hope that this helps trap invalid configuration before
they deploy their production IdP.