post submission form, remove insecure