Don't render the hidden fields in divs. Pass csrf and method values.