Credentials exposure in session storage

More info at https://simplesamlphp.org/security/201812-01...