1) RLogin connections are accepted from any IP
2) If the IP is not in the rlogin.can, the 2nd user name is tested against the
   users password.  If it matches, the user is auto-logged on.
3) Currently, the case where the name exists but the password doesn't match
   isn't what I'd like it to be... ideally, it should go straight to the password
   prompt.  It currently assums a new user... mostly because I wanted to keep
   this change easy to back out of anyone hates me.