Guard against Man In Middle, CSRF attacks, XSS Attack

[TrackTech]

• HTTPS should be implemented for Man in middle attack defense
• Investigate CSRF attack defense
• CSRF check cheat sheet https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)_Prevention_Cheat_Sheet

[TrackTech]

• All pages need CSRF token.
• Determine how to submit CSRF token when form post happens