diff --git a/backend/api/login.js b/backend/api/login.js
index 59c90ae..100d230 100644
--- a/backend/api/login.js
+++ b/backend/api/login.js
@@ -17,6 +17,7 @@
             switch(login.type)
             {
                 case "loginserver":
+                    // @TODO: add cluster secret key verification
                     break;
                 case "website":
                     break;
@@ -32,6 +33,8 @@
                     return;
             }
 
+            // @TODO: log login attempt and type
+
             app.managers.userManager.loginAccount(login.user_name, login.user_password, function(message, user) {
                 if (message === "success") {
                     res.send( { message: message, user: user } );
diff --git a/backend/api/metrics.js b/backend/api/metrics.js
index 0791a50..9fc87c1 100644
--- a/backend/api/metrics.js
+++ b/backend/api/metrics.js
@@ -8,6 +8,7 @@
         app.app.post("/api/metrics", function (req, res) {
             let metrics = req.body;
             console.log(JSON.stringify(metrics));
+            // @TODO: add cluster secret key verification
             app.managers.metricsManager.processNewMetrics(metrics);
             res.json('success');
         });