adding todo items for potential security problems

This is my first pass at looking for potential security problems.  Problem areas marked with TODO