Added CSRF protection in forms
Made the hash field as unique field in Module Builder instead of name
3 times fail to login will automatic block user for 10 min
username can have alpha-numeric characters, as well as dashes and underscores.
Merge pull request #59 from masud79/security-fixes

Some Security fixes