Interestingly, there's a new branch (http://github.com/technoweenie/restful-authentication/tree/modular http://github.com/technoweenie/restful-authentication/tr

Interestingly, there's a new branch (http://github.com/technoweenie/restful-authentication/tree/modular http://github.com/technoweenie/restful-authentication/tree/m...) of Restful Authentication (labeled "Experimental Branch" in the README for the main branch) that backs away from the code generation approach of the current and previous versions of Restful Auth. To quote from readme in the modular branch of Restful Authentication: "The plugin now generates much less app-space code: the controllers are super skinny now, and if any security flaws are discovered it should be less painfulto stay current." I applaud their new direction, but IMHO the fact that this is their new direction validates my point that their old direction was just plain wrong. Code generation is little different than "cut and paste" programming.