a) Decoupling from internal password protection and validation through fe_users. b) full use of API calls for database writes (thus preventing SQL injection) c) All Client-side Javascript moved to attached js file