Turn /cas/login into CAS server endpoint only, redirect to /login