Changed sequence of error messages. This makes more sense and should be better

understandable from a user's point of view.

auth/shibboleth/lib.php

@@ -11,15 +11,15 @@ function auth_user_login($username, $password) {
 /// If we are in the shibboleth directory then we trust the server var
     if (!empty($_SERVER[$pluginconfig->shib_user_attribute])) {
         return ($_SERVER[$pluginconfig->shib_user_attribute] == $username);
-    }    
-
-/// If we are not, then the server is probably set to not be Shibboleth-only
-/// and the user has used the normal login screen, so we redirect to the shibboleth
-/// directory for a proper check
-    redirect($CFG->wwwroot.'/auth/shibboleth/index.php');
-
-/// There's no point doing anything further here
-    exit;
+    } else {
+    /// If we are not, then the server is probably set to not be Shibboleth-only
+    /// and the user has used the normal login screen, so we redirect to the shibboleth
+    /// directory for a proper check
+        redirect($CFG->wwwroot.'/auth/shibboleth/index.php');
+    
+    /// There's no point doing anything further here
+        exit;
+    }
 }
 
 function auth_get_userinfo($username) {