parse a slightly shorter response from CAS server

Apparently an upgrade to CAS might end up sending a shorter response.
Thanks to  Christian Illy for the bug report.

I can't actually find in the spec anything that says that the ticked
MUST be 32 char long...only that the handler must accept tickets up to
32 char long.  So probably I misread the spec when I wrote this the
first time.