Making the web more HIPAA compliant