Re-instate a configurable loginUrl for CAS

Some institutions do need the configurable loginUrl in order to support their authentication setup. We need to bring it back. This might require us to do some more extending of passport-cas
Is there a reason to pin this version here?