Principal attributes should kick off mfa sequence, if needed, even if no service is passed to /cas/login
Merge branch 'master' of github.com:Unicon/cas-mfa