add some rate limiting to the password reset functionality
add some authorization checks to the Wiki
allow the prevention of the LMS/CMS from being renderable in an iframe