Add CAS_CREATE_USER setting

The setting will give the developer/admin control over whether or not a user is created when the authentication is successful. The default value is true, as this should keep backwards compatibility (and in most cases is what you want). I needed this as I have several internal applications where I want control over specific users that should be allowed to login.