How do I restrict a user from submitting a form?