You Are on issue re: data leakage and this should be a very important consideration for anyone rolling their very own authentication/authorization scheme. +1 for mentioning OWASP. They access out and tell you of one's program’s weakness with out likely into the depth you’d ought to correct the problem. Maintain http://pigpgs.com