Ban unauthenticated logins.
Merge bug26052
stable to default