added UNION attack SQL Injection challenge
helper method moved to bottom
added weak password challenge
fixed triggering of form validation on reset
fixed #24 feedback issue and added confirmation message