See Actuate Active Portal Security Extension (APSE) and web directive.