How do I make a form secure when using a custom url?