Form now works but still needs validation for security