Shibboleth auth improvements 2.10.x