CAS 4.0 overlay with multi-factor authentication