Avoid activating session_crypto module in main httpd.conf
Allow lockedout page to be public (accessible without authentication)
Failed implem for mod_auth_form.c based on apr_table_t (not global enough)