factored out web secrity modules, GEOS-5972