fix issue where forms not allowed for non-staff users