Shibboleth LoginHandler that delegates SSO and primary authentication to CAS