check_in_form is now username protected