if (!req.session || !req.session.cas_user) {
        res.status(401);
        res.send("You must be logged in to complete this action.");
        return;
    }