Vulnerabilities in simpleSAMLphp Authentication