Form data ends up in the URL unless form method post