Form zone_id fixes

Prevents XSS with zone_id and has additional form validation