lock down active record version
fix form tag