Should I be using RAILS?

Jonathan Dobbie wrote:

User is determined by REMOTE_USER (using apache auth is far easier than anything else)

It will work: you can access it with "request.env['REMOTE_USER']" from any controller.