comments table added + security + validation