Fixed a large security hole. Adding additional validation to all controllers.