Automatic Security Analysis of SAML-Based Single Sign-On Protocols