Scanned Notes: Convert to new security model, escape form input, remove redundant code.