abstract UserSession? authenticate(WebReq req, WebRes res, Dict? opts := null)

Authenticate a web request and return a session. If request is not authenticated then redirect to login page and return null.

abstract User? read(Obj username, Bool checked := true)

Lookup a user by username. If not found then raise exception or return null based on the checked flag.