Using REST for CAS password validation