More fully integrate and test ssl external auth in CMS

(cherry picked from commit 6952a4a7009333c5bb18420eca4ad42c30166b05)