add authentication and security
validating user input
prevent cross-site scripting
SQL injection example
route force https