changed form path
changed from show to create
changed method from get to post
post method on form requires create route, added hidden field authenticity