Security issues

Prevent XSS injection.
Prevent brute force attack on login. Configuration in config/session file.