A Shibboleth ECP authentication client that also exposes access to the SAML response received from the IdP