Design a secure architecture for a web application that handles sensitive user data at 22nd Century Technologies.