Created an account on oat.cs.uwaterloo.ca with "sudo adduser oat-test". Installed an ssh key for myself. Probably want to be in the sudoers file (edit with visudo).
Set up the custom Play server (it has a minor addition to check for secure connections; working on a pull request to the Play project)
checkout the correct git branch "git checkout dev"
copy conf/local.conf from someplace; set the callback param to oat.cs.uwaterloo.ca (rather than advising; don't want CAS to redirect to the production server)