Tweaked postal code validation
Fix spelling error and minor html encoding issue
Inhibit <enter> from a Yubikey OTP
Enable form tokens

- Protect against XSRF attacks
- Prevent form double submits