add request module for csrf protection on client
add confirmation dialog to database