More fully integrate and test ssl external auth in CMS