http://phpsecurity.readthedocs.org/en/latest/Introduction.html