prototype Single Sign On with WS-Federation and SAML