sso fixes