1.pip install pycket
2.pip install redis
防止xsrf攻击只需在模板form标签加入：
{% module xsrf_form_html() %}
<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <title>登录</title> </head> <body> <form method="post" action="/login?next={{ nextname }}" > {% module xsrf_form_html %} 用户名</br> <input type="text" name="name" /><br> <input type="text" name="passwd" /><br> <input type="submit" value="提交"> </form> </body> </html>