- Added CSRF protection
- now checks on SCC if user is registered