refactored forms, tests, and user action authentication