AuthKit isn't the user authentication stuff. It's one guy's attempt at user authentication stuff. Most of us Pylons people ignore it.
Generally we roll our own authentication using the session object. It's just as good as AuthKit, and a whole lot simpler.
http://wiki.pylonshq.com/display/pylonscookbook/Authenticati...