Derby is absolutely amazing, but when I tried to build something with it 6+ months ago, I was stymied by the complete lack of authentication features. The majority of apps (and games) require the ability to show one user X+Y and another user Y+Z, and it seems like a ludicrous oversight.
Looking now, I see a vague reference to server-side logic (in the context of recommending against it!), but nothing about auth specifically. Has anything changed or improved on this front, or are there any plans to do so?