Authentication :(

[Yannick Menager]

I've been looking at the authentication block, in order to integrate it 
with RoleFilterTransformer using a Filter to support use of 
request.isUserInRole().

However after going through it over and over, my opinion is that it is 
WAY too overcomplicated, and to add insult to injury, doesn't even 
provide support for roles/groups :(

*sigh*

To be quite frank, IMO, the whole thing needs to be scraped and 
rewritten ( preferably using the KISS principle ;)