Pyramid "Auth" API Design Postmortem | Hacker News Reader