User auth in web.py.