CAS-1463: Update to CAS client 3.3.1

3.3.1 disallows empty proxy chains, which is relevant to clearpass.