CAS-1463: Update to CAS client 3.3.1

3.3.1 disallows empty proxy chains, which is relevant to clearpass. 
Yes. Realized the construction of that statement made little sense!