some experiment on Auth module.
some more thoughts into Auth.
moved some logic to AuthPost.
AuthPost to throw various exceptions, just in case.

tested AuthPost.
removed unused class.
saves last access time from previous post, and clear it.
also moved session start to where it will be used…
added $start flag to control to use session or not.
tested Auth class.
tested logout; clears user_info as well.

also added some code for controlling cookie.
removed unused abstract and (obsolete) sample code.
refactored Auth -> Authenticate;

created AuthStorage objects to manage post, session, cookie, and possibly more.
tested StorePost class.
test StoreSession object.
start testing Authenticate class.
fixed login isLoggedIn to use empty.

in object, isset returns true even if the value is null.
moved setting lastAccess to getAuth and login.

load method should have only one side-effect: updating loginInfo.
tested login and logout methods.
add new tests for Authenticate in test suites.
delete all Auth/* stuff, that is replaced with Authenticate.