disable protection in assets controller else cookies/session breaks in apache deployment
catch/filter out any forms with errors in config