ESAPI wrapper

No point calling the ESAPI functions directly, Its likely to change.
Security wrapper added call that instead.