How to make the form embed code secure?