change form method to post
Add "proper" permissions for groups