change extension of entry form to php rather than html
use security token in order to prevent CSRF