centralize saml token fetching in client
if stubbed, skip getting saml tokens
preserve last_username for debugging support
edit logging on error responses to provide info intuit developer support prefers