authenticates against cas!