remove some evil data_submitted calls and check sesskey on actions
only check upgrade if config.php has been included before loading this file.