Using request.form instead of session