unProtectsite does not generate any HTML, but it calls setProtectsiteForm at the end via $this->forward&mdash;sorry, is this really necessary?