Forgot mention: this flow is kind of what happens today except mod_python is used for the validation/authentication instead of nginx.