/* Modified by NaX from release 4.6 to use HTML forms, HTTP-AUTH will not run under PHP installed as CGI [http://drupal.org/node/28408]
   Modified by Gestaltware for additional enhancements

Settings
-------------
  + consolidated http-auth and html form setting to one variable
  + removed CSS, request error message variable settings
  + changed HTML Login and Password Reset form variable settings to represent message only (form logic embedded in functions, not settings)
  + added configurable HTTP-AUTH realm (Junyor - April 29, 2005 - 04:25)

HTML/Reset Forms
-------------
  + Reset Password form is not shown unless there is a Password Reset message variable
  + added inline error message
  + added simple dialog page template system

This likely breaks Drupal programming convention, but I think is still a step further than embedding CSS/page logic as a setting. Basically, there is a new file <em>dialog.tpl.php</em> which you put in one or more of your theme driectories, and skin as you wish to match your site. If this file is not found for the theme, then there is a very simple default dialog that will be used. This dialog (whether themed or the default) gets called by the function <em>dialog_page</em>, whose purpose is to display a small amount of text that bypasses the function <em>theme_page</em>. Examples might include trapping all error messages, loss of DB connectivity, or in this case, a login/password reset form. I would recommend moving <em>dialog_page</em> into <em>theme.inc</em>, but since I'm not yet running 4.7x, haven't seen how much has changed.

/* Modified by NaX. 27/03/2006

Authentication/Logging 
-------------
  + removed duplicate failed log message for HTML form
  + added failed log message for http-auth
  + invalid login attempt logged only if username and password is provided
  + superuser (uid 1) automatically authenticates regardless of access settings

Misc
-------------
  + fixed password reset logic ($account was passing even with no matching record, likely same problem in user.module)
  + remove redundant code (empty functions: _securesite_user_pass, _securesite_settings, _securitesite_auth; duplicate functions: securesite_t; renamed functions: securesite_user_pass to securesite_user_auth)

/* Modified by NaX. 02/04/2006

Settings form
-------------
	+ grouped similar settings in field sets.

Bypass Login Filter Pages
-------------
	+ added the ability to bypass certain pages.
	+ added a IP session check. If enabled the bypass will only take place if a users has an active session with their current IP address. Used with embedded video using the Acidfree module.
	
/* Modified by NaX. 05/04/2006

Settings form
-------------
	+ upgraded to work with 4.7
	
Authentication 
-------------
	+ fixed HTTP_AUTH logout problems
	+ on logout $user is loaded using 0 same as in 4.7rc1 rather than unset()
	
Email Password
-------------
	+ upgraded to work with 4.7

Misc
-------------
	- removed duplicate error logging.
	
*/
