Harden the app and compose the middleware stack.
CSRF, CSP, HTTPS, rate limiting, lockout.
The full middleware toolbox.