Security audit #45
Description
I've of course tried to plug as many holes and ensure the safety of the application (no user credential storage, stateless JWT tokens, etc). However we definitely want to do a full comprehensive audit anyway, another one won't hurt.