Why Authorization before Authentication?

[Edgar Fuß]

Thanks for the explanation.

> [This question] comes up from time to time
So it may be nice if someone feeling comfortable enough to answer it could add an explanation to the wiki.

> If you're unhappy with the way the default configuration works,
I'm not unhappy with it, it just sounded counter-intuitive to me.
> it's easy to change it.
... and mess it up. I'll surely refrain with fiddling around with things I don't fully understand.