We need to stop a prompt injection vulnerability in our customer facing chatbot right now before our security audit today, what are the top three immediate defenses we can implement?