I\'m building Pylons-based web application with RESTful API, which currently lacks any authentication. So I\'m going to implement that and in order to avoid all the trouble and
If you build API, you could check OAuth protocol. It's complementary to OpenID.