Security of Ghost

@paopevil Ghost has anti brute-force login protection built-in and has has strong protection against SQL injection (that’s not much of an attack vector with Ghost because there are no visitor-facing forms aside from the subscriber form).