I started refactoring login service along the lines discussed with Alan, David, and others at the apachecon. This includes simplifying login service, and authentication by assertion, delegation principals. David J, I know that you want pluggable api, have you already done some work on it?
Simon
