Tekacs, you are right, current auth is the most simple thing we have in mind. For sure can be better and so we planned to follow more an API standard so to be

Tekacs, you are right, current auth is the most simple thing we have in mind. For sure can be better and so we planned to follow more an API standard so to be interchangeable with others auth systems. That helper is 'dead'. Will be removed before 1.0. If you have some others suggestions or you think there is something insecure, please share your thoughts. In this release we did a lot of stuff to improve that area, so you are welcome!