Hi @agillette,
We recommend using the REST API/Admin REST API in favour of bucket shadowing.
You can create documents, sessions and users on the admin port of Sync Gateway.
For custom auth, your app server can handle that as well and login/signup users via SG (see slides).
James