[Serusers] A bug in www authentication?