can also debug class_check
working on CSRF avoidance
http://en.wikipedia.org/wiki/Cross-site_request_forgery