[GitHub] Inside GitHub: How we hardened our SAML implementation