Registration form fixes

Prevents XSS with zone_id and has additional form validation