milestone done. need to focus on security