ssl_cert_login and allow_anonymous probably won't be explicitly set to undefined
merge bug26481 into default (again)
merge heads of default