You Are on stage re: details leakage and this should be an important thing to consider for any person rolling their unique authentication/authorization scheme. +one for mentioning OWASP. When viewing the reaction headers from CloudFront, Observe the X-Cache: (strike/skip) and Age: (how long in the past this particular site was http://pigpgs.com