changed to use from_tag

changed our %form to =form_tag since we have protect_from_forgery enabled in our application