#10: Remove password encryption from the front-end as it is useless over HTTPS and not secure over HTTP.