#3: update documentation because the filter cannot apply to the whole CAS server for version < 4

I am just aware of the fact that if the filter targets CAS 4, p3/ endpoints are available there as well and should be protected, in whatever strategy that makes sense.