Commit #5 first step of implementing security, removed insecure to prevent client from modifying the DB