* Groundwork done on stopping XSS and CSRF as best as I can.