SAML2 Request Contains Too Many SERVERSESSIONID Headers