Security of Microsoft's Identity Metasystem and CardSpace