added notes about cookies
started security considerations
added mainpage handler
added link to mozilla security site