On Mar 1, 2005, at 1:48 PM, David Binger wrote:
> I think the behavior the client sees is similar to what you describe
> below,
> in that there is no special login url.

Just thought of this point...   what if you want both behaviours, i.e.

a) the first being that when a restricted resource is requested without
being logged in then a login page is shown and on eventual successful
login the resource is returned, and

b) an explicit login link or button, requiring an explicit login url

Would would this require of ensure_signed_in(), in addition?

mario