Fixing Shibboleth authentication in the API