moved sitewide into options portion of the config option csrf protection for contact form under sitewide config option changed register to 1 hour token
added getCurrentIP method to user class added config option for sitewide csrf protection