* The code that handled session establishment via http-auth was also handling re...