Require authorisation on all pages except those whitelisted with AllowAnonymous attribute on controller or action.
Removed static feed xml that was initially used for testing. Refactored code that was used to load that static xml.
Update todo list in readme to include some things related to security.