CAS middleware
make use of REMOTE_USER