Well, I extracted the registration part from user->authenticate() and do_login() functions. I'm going to use them in other scripts. Are there any other places to do with authorization ?
As I got it, the mechanism is simple:
1. user has w3t_id and w3t_mysess -> get data by session and id
2. use has w3t_id and w3t_key -> create new session for the user
3. All other cases (or failed to autehticate in 1,2) ->
(re)login.
Where U_Session is used by the way ?