Use form_tag helper instead of <form> tag to get authenticity_token