Restrict CasLogoutRequestFilter to /cas/validate to avoid interfering
with non-CAS POST requests.