moved sso credential construction to credential generator part instead of dirty hack in AuthenticationModule