In addition to George's questions, are you using any specific authentication plugin (other than manual) that could be the source of this problem?

You might also find some diagnostic information in the web server log.