Basic authentication system

[eluser]Huji[/eluser]
Ok let me tell why I put authentication inside the same controller that handles private data: If I had a different controller for authentication, the url would have been like: /login/ and I might have to submit to /login/do/ for example. Then if authentication was successfull, I would have to redirect to /private/ and this redirect thing is what I want to avoid. You can't maintain the posted data in a redirect easily, so I don't want a redirect to take place.

You may say I don't need a redirect if I set my forms action to /private/login/ for example. However, if the input is incorrect and I have to redirect the user back to the login form, I can't transfer the posted data along with it (I need this data to fill in the "username" box again, asking for the correct password).