You are suggesting 'roll your own auth,' though. Which is more difficult to get right than most people think.