Add authorised check on post
Fix processing of parameters from form