enforce model validation
remove hardcoded urls from forms