Thoughts On User / Page Request Security Model (Part II)