Use default authentication behaviour, with minor tweaks.