authenticate via a CAS Server