Fix form tag to work with CSRF token.