Replace other instances of <form> with form_tag to make sure authentication token is provided properly