.settings: login_module: default # To be called when a non-authenticated user login_action: login # Tries to access a secure page # secure_module: default # To be called when a user doesn't have secure_action: secure # The credentials required for an action 二つの違いは、credentials を調べるか、authenticationを調べるかの違いらしい。