pluggable authentication with Warden