Still working on docs for these pieces. hug does have support for authentication and CORS, here's a simple basic authentication example: https://github.com/timothycrosley/hug/blob/develop/examples/...

Documentation is the projects highest priority at this point, as it has most of the features people need when creating an API, is battle tested in several production systems, and is highly configurable / extendable for anything missing. We're taking the time now to write down all the "hows" and hope to make video tutorials soon as well.