Generally very impressed with Django's auth functionality -- it's very easy to combine auth systems to do exactly what you want.