authentification with CAS when accessing /