edituser.cgi: output actual HTML when auth code is missing