Strengthen case to generate unique secret token.
Ensure requests are protected.
Add custom serializers for xml and json.
Fixed sql injection in timeline method.
Refactor activity_user to remove possible SQL injection points.