fix form_tag with safe method