Change form authentication to use the HTTP session
Fix handling of HTTP 1.0 requests with no content-length