move public submitcheck to MY_Controller
create Rest library
add _valid_formhash