The web server code currently does some weird things with how it manages users and access control, which means it currently doesn't support any form of users except the old style, v2.2 and prior users. We should fix up the code in the web server to use the new data structures and techniques for authorizing users, which should allow it to work on any style of users the server understands.