first working version of cas auth