ProfileService, (a datastore module developed by loleris) has built in session locking which should deal with the hardest aspect of trading systems.
Other than that, just do proper sanity checks on the server (have both parties accepted, do they both have the item they are trading, etc).
A common edge case are bait and switches, so you would be wise to implement a cooldown and accepted reset anytime an item is changed.