CAS client as Express middleware