I have to explain how to test protected areas and authentication separately, using repoze.who-testutil.
https://github.com/TurboGears/tg2docs/issues/1
https://github.com/TurboGears/tg2docs/issues/1