use submit_form_locally
Merge pull request #2327 from dimagi/kill-spoof

use submit_form_locally