You are currently accessing CAS over a non-secure connection. Single Sign On WILL NOT WORK. In order to have single sign on work, you MUST log in over HTTPS.
HTTPS and IMAPS and HTTP
This service definition authorizes all application urls that support HTTPS and IMAPS protocols.