Fix issues with Shibboleth plug in

Fix remove unpack old Shibboleth interface - it overwrites ours
Fix a missing Spring security setting
Use new 'is not' operator to allow every AAF authenticated user to access