CMU researchers work on Web security, access