Authentication is built-in. You can authenticate users and give them specific access with a JSON-like file that lives on the server. It actually works wonderfully.