SimpleAuth was originally, the official auth plugin for PocketMine. Anything else would not even be considered to be added to the plugin repository. Those rules have changed since then, but SimpleAuth is still popular, as though it is still simple. Why HereAuth isn't featured, however, is beyond me.