An example of securing an eXist-db app