defensive for form and ajax in controller for already in db