Unquote INPUT_GET in call to filter_input()
Merge https://github.com/peredurabefrog/phpSecureLogin
Added todo.txt