1 files changed, 5 insertions, 1 deletions

diff --git a/TODO.md b/TODO.md
index 2f5b851..d496feb 100644
--- a/TODO.md
+++ b/TODO.md
@@ -1,8 +1,12 @@
+* web fonts
+* session expiration
+* solve open redirect bug (also use Origin: and Referer: header)
 * factorize templates
 * add oauth2 login option
 * 2FA?
 * improve user page:
-  - display all sessions and more info about them (location, OS, etc)
+  - display all sessions and more info about them (location, OS, etc, cf.
+	ipinfo)
   - ...
 * ssh key management?
 * admin interface?