Fixed incorrect handling of forceAuthn/isPassive

Using correct calls to check for presence of forceAuthn
and isPassive in order to set the correct parameters to
send to CAS in the query string.