I want to learn how to develop in salesforce so I can build custom apps that can do some statistical analysis on data.
I want to publish that app to the app exchange with the hopes that someone who has a salesforce subscription for their company can use that app to see the analysis on their own company's data.
My concern is: do I need to handle the logins like I would when I build a web applications- i.e. creating login pages, session handlers, GET vs. POST etc.?
I am thinking I might use Heroku and build the app using one of the supported languages [Java, PhP etc.]. However, security is not my forte and its something I'd rather let salesforce handle. Is a scenario I described possible with salesforce where I only need to concern with the core functionality of the app?