adding cas properties into req.session.cas.  Fixes #23