Upgrade (on test) to 3.1.15 breaks CAS authentication.

I hunted through the git commits and was able to find the new $CFG->disabletoken setting, tried that and applying it fixed CAS auth.

I assume this is related to MDL-63183 but I can't see that ticket.