https://opensource.net/essential-python-web-security/