Oh cool. Would you mind expanding a bit on the implementation? I have been thinking about a generic auth system like this for some time.