#3: update documentation because the filter cannot apply to the whole CAS server for version < 4

Why not? Or ```BlockUnsecureRequestFilter```?