added underscoreJS to the app
started working on state security