javascript encryption man-in-the-middle attack css mozilla live security microsoft .net authentication identity authentication php authentication explorer identity 2.0 land attack internet security html logic bombs