title: CakePHP and Android Auth Idea. Suggestions Please
body: <p>Well I have this situation where I should authenticate user with CakePHP 2.x site which is using blowfish to save password and I am using GCM for push notifications.</p>
  
  <p>I am thinking it this way. First I will generate a registration ID for the device and then use the web view to open a custom login page designed for android in Server. There if the user successfully authenticates, his device id, registration id and the site recognized username are stored in a table. All requests with saved device id and registration id are used to authenticate a user and perform his actions. There would be mechanisms to control the problems with registration id where it gets deactivated or re issued.</p>
  
  <p>Does this have any security issues or design flaws?</p>