Premature Authn Result Expiration w/MFA

[Cantor, Scott]

> I think we'd need pretty low level logging to catch what it's actually doing, but
> perhaps we could patch to elevate the log level of the code that's extracting
> the MFA result.

Or just up the net.shibboleth.idp.session.impl.ExtractActiveAuthenticationResults category for now to DEBUG, I don't think that would be so noisy in production that it would cause trouble.

-- Scott