Opportunistic fix to security declaration
Add FormMethod form field with default POST
Whitespace
Render method and enctype in forms