Critical When two users log in and retrieve a ticket from the CAS server at exactly the same time, they may end up with the other user's ticket (and so be logged in with its identity and rights).
This is due to the fact that in our CAS2 plugin the authenticator implementation is not thread-safe. We should correct that for ticket and proxy validators.
