Secure form attributes

[raymondlam]

Protect variables so that ppl can't inject form data.
See "Watch your form’s attributes" in
http://www.fortytwo.gr/blog/18/9-Essential-Rails-Tips