Just wanted to give you some pointers when doing your load testing (proper testing will reduce bad news in near future).
What I have experienced is that - when simulating "real" web service users, use "real" tools for it. Such as Selenium, Watir or Robot framework.
Why? Simply put: These tools will simulate actual browsers with everything included, not just few JMeter GET/POST-requests towards your server. I'm also a big fan of JMeter'ish request tests but you have to know the limits. JMeter is great, when you have already discovered some bottle-necks. As I understood, you're not yet sure are there any.
JMeter isn't a real browser, as said in jmeter documentation:
JMeter is not a browser
JMeter is not a browser. As far as web-services and remote services are concerned, JMeter looks like a browser (or rather, multiple browsers); however JMeter does not perform all the actions supported by browsers. In particular, JMeter does not execute the Javascript found in HTML pages. Nor does it render the HTML pages as a browser does (it's possible to view the response as HTML etc, but the timings are not included in any samples, and only one sample in one thread is ever viewed at a time). (source: http://jmeter.apache.org)
Just wanted to point out that sometimes after load testing, you might still find out that system is behaving differently even though we did our proper load testing. Sometimes people tend to forget that user with a browser is doing tons of stuff under the hood and that is also traffic/load from a webserver point of view.
Just saying.