allow multiple CAS-servers, correct checks, enable AutoDiscover HTTP