Update repoze.who configuration to retrieve CAS attributes