In the startup script, delete the port so that travis is happy
Set x-frame-option and iexss headers
Start to add input validation.

* Passwords must be at least 8 characters long.
* Add placeholder functions to do validation in the JS.