Don't include an authenticity token in the main form