Lightweight delegation of authentication, for easy single sign-on in rails