#issue 64 - Fixed validate function so native functions work and no xss. 

Set the validate function to return $_POST instead of data, as the prepped data is transfered back to $_POST.

Unless we do this, something like 
       <script>alert('ola')</script>
is passing into the db even with a rule like 'trim|strip_tags'