server side encryption working
added prompt using jquery -- not secure