Added validation for username&email, removed output for form in order to catch XSS