reinstated pre-umbc behavior to use mod_auth_kerb credentials when available