Made some form variables protected.

This keeps them from being serialized to json automagically...