Removed code that was commented out. This code handled authentication, but we don't need it now since our filter doesn't work - it would cause trouble to trust that the session filter contains a Person object corresponding to the person logged in, since it is possible to bypass this when the filter isn't working.