Low Description
https://support.atlassian.com/browse/FSH-4829
there are two problems:
"anon" access isnt given logged in users (ie. if there is anon access, anyone should be able to log in) when using custom auth
custom auth isnt removed when you remove it - you need to manually remove it from the config.xml file