adding todo items for potential security problems