Fix routes and permissions to thankyou form