use rack-cas
allow home page to be viewed without CAS