Merge pull request #29 from iam1980/master

XSS on forgot password, also added missing validation (username & password)
Merge pull request #3 from donjakobo/master

update