Whenever a user logs in through CAS, their username is looked up in the
.rhosts file provided through settings. If it is found, the user is
granted staff status and BOcal group (cf fixture).
The rights are re-evaluated at each login and at each access to
/admin/login.
Close#2.