login form (on /login) is now shown everytime, when user is not logged (no redirection into /saml/sp/login), even though you used direct URL into secured area, fixes #59