Additional tests authenticating as anounymous or subparticipant.

It's not any more possible to use arbitrary authentication values in the Cookie
header. Now it's only possible to use anonymous cookie values in anomymous
Cookie header and subparticipant cookie values in subparticipant Cookie header.
Merge branch 'subparticipants' into vip-specials