added require_sesskey(); to protect actions

fixed minor issues affecting yesterday's commit