added CAS files & basic auth