The user-new page called a proc in the authentications package which checked
to see if a parameter was set or not. However, in upgraded sites, or if
the user had entered a blank entry for the parameter, the proc would bomb.
I made the proc more robust by using string is false instead of 
