start working on report system.
add SAFE_MODE setting that forces all logins to readonly mode and
blocks data modification requests at the API level.