front end security done

- need to do backend security (make sure POST requests to services are
authenticated)