Update README.md
Fixes #86
Fixes #87
Polishing wording
Instrumented Duo code with debug logging
Principal attributes should kick off mfa sequence, if needed, even if no service is passed to /cas/login
Merge branch 'master' into heroku