sign up now properly assigns default security;
CSRF now working on form;
inputs now properly filtered;