fix: do not prefer MFA at upstream when not preferred at SP

Created by: melanger

Previously, when SP sent SFA,MFA, authswitcher would send MFA,SFA to upstream.

With this fix, it sends SFA,MFA as expected.

approved this merge request

Created by: github-actions[bot]

This PR is included in version 10.7.3

The release is available on GitHub release

Your semantic-release bot :package::rocket: