I.e. wheezy.web doesn't use middleware + tags for csrf. It is Python3 without 2to3 crap. And I agree with Aaron Swartz that framework must handle input, output and how to work with server. Logic, templates, databases must be free to choose. Wheezy.web is a set of modules here so we must not install bunch of stuff like Django for something simple. And we can use all of it for something difficult.