No need to test the form, as we already verify the nonce