now the only remaining thing is if someone is using it ..how can i make sure the site is secure ( enable 2fa etc )