Be more defensiv about the username of the slo request
Store subject with cas token for the logout event