Whether we have some sort of authentication in place so we're using Oauth. You know that that's sort of sort of thing, everything you know around how do we prevent cross scripting attacks? How do we sanitize the content that is sent and so on.