Security increased: CSRF patch 1.0 on login.php and register.php

Patch the security hole now prevents CSRF for login and register
functions, also made the validate->adderror function public to add
errors  more easly