Fix regression over 1.5: Fix non-fba auth for Shib IdPs