Big reworking of authentication machinery (wincent.dev, d9afad4)

Basically consists of massaging this into a working state in response to lots of manual testing.

Signed-off-by: Greg Hurrell <greg@hurrell.net>