- - session() attribute, and get_session() method (no-op)
- - user() attribute, and get_user() method (no-op)
- - get_session() now called during handler_guts() before authenticate()
+ - get_session() method (no-op)
+ - get_user() method (no-op)
+ - get_session() is called during handler_guts() before authenticate()