Be more explicit about what is saved in SSOLoginData.

Saving all of 'data' might not be the best idea anymore, since that
might include a password for example when 'data' is all the POSTed
parameters to the login page.
bugfix: info, not _req_info.