After an apparently successful upgrade from 1.7.1+ to 1.8+, it was noticed that students were no longer able to log in. It was then noticed that all students had their authenticaion method set to "no authentication". The authentication method should have been email; that is what it was before.
The fix was to run this sql:
update mdl_user set auth="email" where auth="none" and deleted=0;