Fix AuthRequest when base URL contains query params.

If the SSO target URL already contains a query part, the SAMLRequest
parameter should be separated from the URL with '&' instead of '?'.