Thoughts On User / Page Request Security Model