bug fix: I broke the reg page. fixed. also added a basic key check on it. (so that only folks that know the key can reg new orgs.
added auth and csrf check to scan page