Logged In: YES 
user_id=6405

This patch doesn't actually verify the password used and 
therefore makes possible a circumvention of authentication by 
a client connecting directly to the roundup-server supplying an 
Authentication header with "admin:gibberish" as the Basic auth 
information.