refactoring: split check of user validity into its own module. it has nothing to do with a GET or POST method nor should it have anything to do with those methods.
bringing websecurity module to gothonweb.  it looked good in loginexperiment.