How can I introduce user/group management functionality?

(Part of ZopeInAnger)

See How do I use cookie based sessions?