CAS-1355: Set allowedToProxy to false by default (SEC_3)

https://wiki.jasig.org/display/CAS/Proposals+to+mitigate+security+risks

A first proposal for this version 4.0, a simple but important one : no proxy capability by default for the service...