[Zope] Does Zope support user authentication, sessions, etc?

[Boon Hoo]

My upcoming project is to build an investment-related website that
allows members to customise their profiles, portfolios and etc. Users
can also gain access to "tools" that they have subscribed for.

From the specifications given, my first thought is to implement it in
object-oriented way of programming. Zope (being open-source and OOP
from ground-up) naturally came to mind. Therefore, i would like to know
whether Zope is suitable (and stable enough) to develop this kind of
websites, bearing in mind other criteria such as scalability, performance,
and the "learning curve" involved.

I have done programming in PHP before, and AFAIK to implement features such
as user-authentication, sessions and permissions in PHP, we can either write
our own libraries, or use PHPLIB. However, looking at PHPLIB, it seems to
be quite buggy, and require a lot of work re-writing for some of its
functions.
Therefore, I would also like to know whether there's any
authentication/session
management modules(or classes) already written for Zope, and if they exist,
is
it easy to implement them(as in as easy as plug-and play, or a lot of coding
required)?

Thanks in advance.

Regards,
Thee Boon Hoo