move cas config to settings
remove old auth code
mock authorize!