Requests against /application now perform CAS login with gateway flag