new cas auth provider for proper mvc auth