A web framework Authentication 1.cookie： self.set_secure_cookie， self.get_secure_cookie 2.use post first，use _xsrf to avoid xsrf Note: 1.use async 2.request handler: init-->handler-->control-->db 3.use sql instead of mvc