Merge pull request #1925 from apache/juerg/token-auth

Support access tokens for CAS and Remote Asset servers