Improve form_key handling when spoofing that value