First step, don't use JavaScript or derivative technologies. Oh wait, you can't avoid using Javascript. I guess it's that, or we don't make any money, we use Javascript. I wonder how Amazon avoided using Javascript for so long. Oh yeah, 10,000 engineers and military cooperation. Good luck on making a "secure" site that conforms to any standard of the last 10 years!