authorization is sometimes blurred. If custom authentication routines are required instead
of those provided by the server, then these routines must be applied to every single page,
since these pages could be requested directly.
Use a vetted library or framework that does not allow this weakness to occur or provides