Authentication actually uses the database and sessions now instead of www-authentication.