Correctly handle Shibboleth sessions

Closes #17.
Closes #18.