adding security, simplifying file layout
adding leaflet-draw