- removed unneeded http headers for security
- added a non blank action on the form for w3c validation