User Management Core

[cliftonc]

Make user management secure (hashed passwords etc.) and also pluggable re. using facebook / twitter accounts.

[dennishall]

Make sure to check out connect-auth. It has everything except the securely transmitted and stored (salted, hashed) passwords.

[cliftonc]

Thanks for the pointer - will take a look.

[dennishall]

Here's an example of connect-auth with salts and shas. https://gist.github.com/957897

Please excuse the abandoned email verification chunks other commented-out code.

[cliftonc]

I'm going to split this issue out into a separate one, closing this with the implementation of bcrypt to provide secure logins, but creating a new one to cover the integration of oauth etc. via facebook / twitter.