Server not blocking Honeypot field when JavaScript is disabled