cope with the problem of taint XIUMAI_HOME and cookie
fix taint 'login_name' problem
deny editing and updating resource when without login
deny POST without session_id
Checking in changes prior to tagging of version 0.05.

Changelog diff is:

diff --git a/Changes b/Changes
index 82ab628..d382924 100644
--- a/Changes
+++ b/Changes
@@ -2,6 +2,10 @@ Revision history for Perl extension XiuMai

 {{$NEXT}}

+0.05 2014-11-01T04:13:54Z
+
+    - add user authentication
+
 0.04 2014-10-26T08:03:24Z

     - enable mkdir, rmdir and upload file