A fair bit of work on security and ajax