[Major] cleaned up stupid use of forms for POST and added proper sec