http://www.tornadoweb.org/en/stable/guide/security.html?highlight=ajax
Anonymous
Separate policy from mechanism, separate interfaces from engines.
