As noted by the comment associated with the authenticate method in application_controller.rb:

This authentication system is targeted at etch clients. There should be an alternate authentication mechanism targeted at humans so that humans can interact with this service when authentication is enabled.

Moved from https://sourceforge.net/apps/trac/etch/ticket/11