Mongoose with a security mechanism that prevents the execution of any calls without a previous login attached a browser session (in sopro a webkitwidget session)