make sure we make a copy of form model so permissions filter doesn't operate on cached global copy