Content Security Policy headers, CSRF middleware, Persona authentication (whitelist based), what-a-not :P
0.2.0