Our abstraction unfortunatelly does not cover this case. This module intercepts username and password coming from form and uses those credentials for authentication. If it succeeds it adds REMOTE_USER header. So the difference for this method is that we can't use require_login before_filter because we are using foreman login form. But we still want to delegate authentication to external system during this process.