[sansnomme]

Authn/Authz needs to be integrated into code already.

[tomca32]

That's a fair point. Devise is pretty much standard so it's easy, but you're right that it would make more sense for it to be part of Rails to begin with.

[ksec]

This, I asked about this a year ago and most of the Rail Core seems to be against it.