http://passportjs.org/ is a general-purpose authentication library that I think would work great in the dashboard. (@plypy and I are already using it for the profile data API) There are two-factor plugins for it. Passport would also simplify the ability for us to allow OAuth sign ins from Github, Google, Facebook.