Authentication backends revisited

...