The REMOTE_USER environment variable is ignored
(it is set, the immediately reset to 'anonymous').

The attached patch fixes this.

With this patch, windows integrated authentication 
behind IIS works like a charm.

-sbi