change request form to form_for, solved invalidtoken error