Merge pull request #390 from Unicon/CAS-1416

CAS-1416: Expose /status and /statistics access rules in cas.properties