allow form hash