https://toxigon.com/guide-to-python-web-security