Fix: Use RequestSecurityTokenResponseCollection
The IdP returns security token without the mandatory RequestSecurityTokenResponseCollection element.
The IdP returns security token without the mandatory RequestSecurityTokenResponseCollection element.