Fixed authentication logic.

Authentication logic was incorrect; users no longer need a nonce,
and nonces no longer need a user.
Updating ZIP with changes.