Security
Security
Security
Securing Sessions
Use SSL to encrypt connections.
Store as much information as possible in a database.
Disallow IMAP access from the "outside."