[phpCAS XSS in final_uri; PHPCAS-52]
Only supported behind an authenticated HTTP zone
http://www.ja-sig.org/issues/browse/PHPCAS-52
