Securing drupal and civicrm