The authenticate page generated too many <input type=hidden ...> fields, which meant if you logged in with the wrong password and were given the "bad password, try again" authenticate page, you could enter the right password until you were blue in the face, but it would still be testing against the first (incorrect) password you typed.

Removed some lines that caused warnings in Perl 5.004, which prevented the http server from seeing the Content-type: line.