[Zope] Two low-impact security issues in Products.PluggableAuthService