Standard security measures

Describe validation, encoding, user provisioning, security roles, error handling, session handling, CSRF protection, audit trails