Only check auth on admin pages

CAS check is was killing post data for unauthenticated users
I really need to re-visit issue #1 and keep some internal session
handling