AuthManager::setDefaultUserOptions and LoginForm::initUser shouldn't invalidate CA...