Since the official API (https://github.com/HackerNews/API) does not support authentication, how are you collecting and storing auth credentials for login/posting?
We don't store credentials within the app. When you login, we just keep the (long lived) auth cookie provided by HN if login succeeded and reuse it in the future when posting.