Is this a reason why SAML is more secure than Secure Web Authentication (SWA)?