1. Removing unnecessary method override. Let client application
implement the redirect after authentication is successful.

2. Adding validation for time stamps on Saml responses. If the
application receives a saml token older than the earliest timeout
described in the token, the authentication is rejected.

3. Ensuring openSAML bootstrap is done only once per application startup
as this process is extremely expensive.