CAS is configured to accept a static list of users for primary authentication. This is ONLY useful for demo purposes. It is recommended that you connect CAS to LDAP, JDBC, etc instead.