fixed issue in vstore sitemap
added validate_path to navcat
removed some nonce code in checkout