Why are people able to submit form even if the "required" fields have not been filled out?