A web framework Authentication 1.cookie: self.set_secure_cookie, self.get_secure_cookie 2.use post first,use _xsrf to avoid xsrf Note: 1.use async 2.request handler: init-->handler-->control-->db 3.use sql instead of mvc