Add some debug logging.
Move not_authn from Service to SSO.
fixup password auth