Resurrecting DWF

It's a gate which you can open yourself in two minutes. If that's DWF's only problem, kudos to them.

Also, if you don't like that restriction, fine: add an auth hook towards Gitlab and submit a modest pull request.

Still not satisfied? hook up a registration form with TOTP-or-whatever for two-factor auth, and send a somewhat larger pull request. It's not rocket science.

However, if you do it yourself you have to track data protection laws more stringently because you're storing more personal data, you need more security precautions as you now store user passwords (yes they should be salted+hashed but that's no excuse for failing to prevent a leak), etc. You want to take those costs on? be the project's guest, I'd assume.