OK, I think we are done
Took most of the comments and suggestions and worked on the site again. One issue I have discovered is that I have implemented some CSS3 features that is only supported in the recent browser version (IE is the biggest problem!), but we will live with that...
What do you all think now - is this good or is there still things that need to be changed?
By having the site as simple as possible now, we can make it secure by just refreshing the site files every week or so (delete what is on the server and upload the files again - to remove any hacked code). We will also change the passwords more frequently now.