this should also be CAS_SESSION_EXPIRE_TIMEOUT right?  (and below, in cas_authenticate)