Have you had a security audit of your prototype? I've seen a lot of slick looking stuff rendered almost useless because it wasn't built with security in mind.