diff --git a/ayanova/devdocs/todo.txt b/ayanova/devdocs/todo.txt
index de8551e0..78d4b170 100644
--- a/ayanova/devdocs/todo.txt
+++ b/ayanova/devdocs/todo.txt
@@ -70,10 +70,6 @@ CURRENT TODOs
 
 todo: Fix the above, then retest on all devices locally to ensure it's working properly
 
-todo: attachment reveal button looks weird below wiki reveal button when read-write
-	- open read only see if it looks better if they're teh same and make it so with wiki or
-	- make the attach like the wiki
-	- Buttons would be more compact and share the title area so maybe that's teh way to go
 
 todo: have a look at ordering the file list in attachments
 	- people might want to see them in order or not.
@@ -91,7 +87,12 @@ todo: have a look at this: devices and sensors specs
 	https://www.w3.org/wiki/DAS/Implementations
 	https://wpt.fyi/results/?label=experimental&label=master&aligned
 
-
+todo: session tracking to prevent logging in from multiple devices with same account
+	- right now if I login as same user on another browser the download token becomes invalid on the first computer
+	- so wiki images don't load etc
+	- Perhaps we track the download token or something during certain requests to server so it can return a 403 and redirect to login if they are on another session
+	- or maybe the download route should return the not authenticated response to force login again
+	- maybe part of JWT session key of some kind that must be current to work to prevent multiple logins
 		
 todo: Look at attachment saving code on server, should it zip?