A web framework

Authentication

1.cookie：

self.set_secure_cookie， self.get_secure_cookie

2.use post first，use _xsrf to avoid xsrf

Note:

1.use async

2.request handler: init-->handler-->control-->db

3.use sql instead of mvc