Better diagnostics when SP authentication fails.