Secure the root page with CAS