fix for cas auth: if hitting /wp-admin, redirect to wp-login.php will add a reauth=1 querystring param which will short circuit cas attempts. remove reauth=1 when building the wp-login url to redirect to after cas.