Please Permit Me: Stateless Delegated Authorization in Mashups. - Ragib Hasan; Marianne Winslett; Richard M. Conlan; Brian Slesinsky; Nandakumar Ramani (ACSAC, 2008)