Move auth validations to forms, fix next param passing
Bump to 2.3.1 (see changelog)