remove action attr from forms & event from angular controller
disable csrf for email POSTs