1. A method, comprising: providing an SDK for a client web application which performs user authorizations; including within that SDK an enhanced set of authorization APIs; wherein that enhanced set of APIs including the following; providing a resource so that the developer can include developer-defined user information; and providing a resource so that the developer can choose between using a cookie, or using server-side storage for storing the developer-defined user information; and providing a resource so that the developer can choose between two embodiments of security framework.