Ajax Applications Can Be Secure