modify authentication to depend on CASTGC cookie
authenticate apis using cas server ticket (CASTGC)