AuthType should be derivable from the other fields.
Bring back CGI-inspired remoteAddr and remoteHost.