fix form authenticity token input