Of course Ovid's CGI Course would be a great way to start. You could write your own security module (or use any of the many available on CPAN), yet you could also just take a look at Apache's abilities to handle this (and some "easier" notes). If you use Apache, that is.