Authenticates users via HTTP properties, headers and session.