issue_140: switch to new CAS server
issue_140: use rubycas-client instead of rubycas-client-rails to reduce dependency because rubycas-client-rails is very old
issue_140: test disable forgery protection for single-sign-out, but does not seem to affect anything
issue_140: rubycas-client uses different filter than rubycas-client-rails
issue_140: share tmp/sessions folder across deployment versions
Merge branches 'financial' and 'issue_140' into production
issue_143: fix cannot create/update users/group
issue_144: allow user to logout from main app
issue_144: cleanup routes
issue_143: fix password got encrypted even it is not provided
Merge branches 'issue_143' and 'issue_144' into production
financial: issue 147