http://www.gluu.org/blog/2-approaches-to-diy-single-sign-on-sso/