When looking for a Duo device from the Onelogin flow, the device signatures are parsed into an array which is not checked for bounds before further use.

`
device := &onelogin.Device{}
for i, aDevice := range stateTokenResponse.Devices {
if aDevice.DeviceType == "Duo Duo Security" {
device = &stateTokenResponse.Devices[i]
}
}
signatures := strings.Split(device.SignatureRequest,

In many cases, our IDs will have access to multiple AWS accounts. It would be very useful to have account alias in addition to account number displayed on the list of roles.