diff --git a/ayanova/devdocs/todo.txt b/ayanova/devdocs/todo.txt
index b97e34fd..a818fa41 100644
--- a/ayanova/devdocs/todo.txt
+++ b/ayanova/devdocs/todo.txt
@@ -70,7 +70,10 @@ CURRENT TODOs
 @@@@@@@@@@@ ROADMAP STAGE 2:
 
 CURRENT ITEM:
-	
+
+# DANGER DANGER - can make two users with the same login.  that's not cricket!
+	- also User model, login and password are not set to required
+
 Fix existing integration tests
 Add tests as I go while adding all the structure of the workorder and all ops 
 	TBD: Does a labor and other grandchild objects record really have an attachment, wiki, and custom fields?