A3M vs. Ion Auth

I'd like to know what's your opinion about these two authentication libraries.

I'm currently using A3M for a project and so far it's working fine. But from what I can see, it looks amateurish and I'm concerned about its security. I never used Ion Auth, but my first impression is it's made by someone that know what he's talking about.

So now I'm wondering if I should switch to Ion Auth or keep A3M. Or maybe switch to something else? Anybody have experience with A3M or Ion Auth? Are they robust enough?

I think it is best to make your own CMS that way you can make it as secure as you want to. I have tried AM3 it's OK but I have had email activation problem with it so I am making my own one now with permissions for demo users etc.

I think for people who develop the CMS should pay some one to hack in for security test and the advice you on changes to make it better.

I am learning more on http://php.net/manual/en/faq.passwords.php

There's only one rule - please don't tell anyone to go and read the manual.  Sometimes the manual just SUCKS!