Secure tools for users only.
Fix HTML so the form will at least POST