A multi-tenant database system, comprising: a database system to store data for multiple tenants; an application server communicably coupled to the database system and to a network, the application server providing network access to the database system for at least one client system; and at least one firewall server communicably coupled between the application server and the at least one client system, the at least one firewall server operable to: receive a client request for a page received from a client system, the client request being associated with a user of the client system, the client request including a user ID corresponding to the user, an organization ID corresponding to one of the tenants, and a client IP address corresponding to the client system; extract the user ID and the organization ID from the client request; record the extracted user ID and the extracted organization ID; forward the client request to the application server; receive the response message from the application server, the response message including the page and a received user ID and a received organization ID added by the application server when responding to the client request; compare the user ID and the organization ID included in the response message received from the application server with the user ID and the organization ID extracted from the client request; and when the received user ID matches the recorded user ID and the received organization ID matches the recorded organization ID: remove the received user ID and the received organization ID from the response message; and forward the response message to the client system. a database system to store data for multiple tenants; an application server communicably coupled to the database system and to a network, the application server providing network access to the database system for at least one client system; and at least one firewall server communicably coupled between the application server and the at least one client system, the at least one firewall server operable to: receive a client request for a page received from a client system, the client request being associated with a user of the client system, the client request including a user ID corresponding to the user, an organization ID corresponding to one of the tenants, and a client IP address corresponding to the client system; extract the user ID and the organization ID from the client request; record the extracted user ID and the extracted organization ID; forward the client request to the application server; receive the response message from the application server, the response message including the page and a received user ID and a received organization ID added by the application server when responding to the client request; compare the user ID and the organization ID included in the response message received from the application server with the user ID and the organization ID extracted from the client request; and when the received user ID matches the recorded user ID and the received organization ID matches the recorded organization ID: remove the received user ID and the received organization ID from the response message; and forward the response message to the client system. receive a client request for a page received from a client system, the client request being associated with a user of the client system, the client request including a user ID corresponding to the user, an organization ID corresponding to one of the tenants, and a client IP address corresponding to the client system; extract the user ID and the organization ID from the client request; record the extracted user ID and the extracted organization ID; forward the client request to the application server; receive the response message from the application server, the response message including the page and a received user ID and a received organization ID added by the application server when responding to the client request; compare the user ID and the organization ID included in the response message received from the application server with the user ID and the organization ID extracted from the client request; and when the received user ID matches the recorded user ID and the received organization ID matches the recorded organization ID: remove the received user ID and the received organization ID from the response message; and forward the response message to the client system.