add application-cas-security.xml