Correctly update User#last_login_on when authenticating through CAS
Make README clearer (see issue #3)
Don't generate a service_validate_url without a host