Agreed. A forms seems like the wrong place to control access.