fixed spacing, do not set request->user before cas_authenticate()