Yes, as the others have said, this is normal. The reason we ask for things like security code that might seem a bit more than normal is some places ask for it, some do not. It is easier to just get it up front than to have to call you for one piece of information we do not have. The good news for you is now that you have provided that information, your advisor won't need it from you again until something expires.
Your experience is normal and part of the process. For us to receive commission, we have to do the booking directly with the hotel. I know in the beginning it might seem like a bit much, which is why it is important to find an advisor you like and trust to help you feel comfortable with the process.