This should be in the BaseSecureForm class rather than here IMO