authenticate scroll action requests
cleaning up error messages and views

and more sanitizing