How to prevent fraud from iFrame signups?