diff --git a/readme.md b/readme.md
index 8975dfa..6df9bbe 100644
--- a/readme.md
+++ b/readme.md
@@ -53,11 +53,13 @@ cargo build
 
 
 ## TODO:
-* figure out auth
 * finish game logic
+* prevent multiple users claiming the same identity and then all losing it - may create a zombie
+* prevent zombie users after browser crash
+* figure out proper auth
+* use db
 * support card text editing
 * prevent import of cards that have been seen already and edited
 * handle duplicates
-* use db
 * efficiency
 * make demo clients for multiple platforms and screens