Apparatus and method for securing documents posted from a web resource

An apparatus and method provide flexible and heightened security for accessing web resources with a client browser (100), where the web resources are on a server (31). In particular, the apparatus and method are accomplished by having the client browser (100) generate a token that is provided to a security server (140) to provide third party validation of a client request for service. The client browser (100) makes a call for service, and includes the token as a argument of the call. A CGI-BIN program (160) that receives the call for service also receives the service identifier and arguments, among which is the client browser (100) generated token. The CGI-BIN application program (160) establishes a connection to the security server (140), and then sends the token received as an argument to the security server (140) for third-party verification. If the token is verified by the security server (140), then the CGI-BIN application program (160) executes the requested service program.