Update to make its CSRF safe. and also pass params to next page with
Query String