Changes to CAS, now connect as client, not proxy.
Add authorized groups checking to account for guest system.

authfail.php is the page redirected to if the user is not a member
of an allowed group.