add security and server-side inserts