Not directly responding to your question, but you might want to look at Lars' work on external authentication, so that your changes and his don't conflict.

This looks like a useful feature.