rework user to rely on phpCAS