do you have any easy docs in "Securing Back-end" other than the invo sample app, because it's using Phalcon version is 1.0.0. Using session to secure a controller, because I can't use __construct method on controller and I don't want to put a security checker in every method of controller.