some more html, add some server side validation