Fix CAS bug auth with express version 3.4.8

With express version 3.4.8, CAS authentication doesn't work.
Note: I don't test this patch with express version prior to 3.4.8