- updated form to <form:form> for security reasons