Single Sign on Authentication Security Can Be Improved