Security in a Web 2.0+ World: A Standards-Based Approach