List of things to security test

Add a list of things to write security tests for.