amend aims and scope

Security is now out of scope for this project. Implementing oAuth is a large undertaking and needs to be dealt with as a separate project.