Update README

[Abbbyccc]

• add security plan to README
  Questions to consider
  Will you store session info in a cookie (stateless) or in your database (stateful)?
  How will you check a user’s identity (authentication)?
  How will you control what actions a user can take (authorization)?
  How will you mitigate Cross-site Request Forgery (CSRF) attacks?

[patdel0]

Day 1:

• Established what the roles would be, by checking which ones we had already performed.
• Brainstormed for 5-10 min. to get a general idea of what the project would look like
• Created a wireframe of the website, alongside the structure of the database
• Made sure our project design accommodated the user stories and acceptance criteria
• Created the folder structure together as well as determined which technologies would be used in the project
• Created the Kanban style project board and added the workflow for automation
• Estimated how much time would be spent on each issue
• Concluded pair programming would be the best approach

DB Schema:

[patdel0]

Day 2:
SPRINT 1

• Reviewed how to handle booleans in db schema
• Accessed books from database and display form
• Create sql queries for books
• Referenced previous workshops and challenges, without ctrl+c/ctrl+v
• Got a better understanding of process.env and had multiple reminders to use DB_FILE before running the node code
• Learnt how to use the VS Code GUI to help create meaningful commits

SPRINT 2

• Discussed priorities, regarding implementing toggle 'sharing'
• Talked about reusing a nav bar for all of our pages
• Entertained the idea of there being possible differences between the use of table or unordered lists and concluded this should be a spike
• Struggled with two forms in the same page, due to a missing closing </form> tag
• Managed to implement the toggle functionality, updating the database 'sharing' value
• Created cookies
• Handled sign up, login and logout - all referencing the created session/cookie

[lisahns]

Day 3:
SPRINT 3

• sanitise and validate user input
• logged in users can delete books from their user page
• error message due to missing cookie secret in package.json script - npm run dev does not run properly without the cookie secret.
• trying to hide environment variables .env file
• css and styling