CAS: add logout filter