CAS proxy validation failing

[Cantor, Scott]

> We decided that modifying Shibboleth to this extent to work around a
> misconfigured CAS client was not worthwhile.  :)

I would agree and it's also I think not even correct. I think I know a way that is, but it's a real mess all around. I happened to be working in this area when this came up, so rest assured it's going to get cleaned up for when something else comes up later. I am extremely, bordering on obsessively, paranoid about having total control over HTTP client use at deploy time.

-- Scott