#3: update documentation because the filter cannot apply to the whole CAS server for version < 4

No problem. It's a security filter to protect against attacks, the documentation must be "crystal clear".