Changed to use form_open().

Changed to use form_open(), will add csrf fields if CSRF is enabled