title: Rolling out a web authentication system
body: <p>I'm building a site that requires user authentication and authorization. My initial idea was to write the application using the Flask framework. However, <a href="https://stackoverflow.com/a/6973165/1239405">I learned that Flask doesn't have a built in authentication system</a>. It does have an extension flask-login, but I haven't gotten any confirmation as to whether this extension is well-written. I've read that it's very easy to get  authentication wrong.</p>
  
  <ol>
  <li><p>Might it be a good idea to switch to something like Django or web2py, which do have built in authentication systems?</p></li>
  <li><p>Do good web programmers typically choose to use tried and true authentication systems as opposed to trying to roll out their own?</p></li>
  <li><p>Is there a good guide that demonstrates best practices with respect building an authentication/authorization system?</p></li>
  </ol>
  
  <p>Thanks guys!</p>