No worries. The application is not public and is actually a small browser based training exam functionality where students take tests. The customer wanted to remove copy and paste, so minimal security on this is all that's necessary.