add support for CAS2 alongside WIND

Please note that since our test service is not returning affiliations,
the affiliations/group parsing/handling part is speculative, with
a unit test based on the official CAS specs. So *ought* to be right
but hasn't actually been tested against Columbia's CAS service.