How secure is the authentication via Shibboleth