Better param validation
save content page
Accept POST only
Make sure the http request gets the right http status
save order on drag and drop