{% extends 'layout.html' %}
{% import '_wtfhelpers.html' as wtf %}
{% block content %}
<h1>Register</h1>
<form action="{{ url_for_security('register') }}" method="post" name="register_user_form">
  {{ register_user_form.hidden_tag() }}
  {{ wtf.form_errors(register_user_form, hiddens='only') }}
  {# Honeypot — invisible to humans via CSS; bots that auto-fill all
     text inputs land here and get rejected server-side. #}
  <div class="hp-field" aria-hidden="true">
    <label for="{{ register_user_form.website.id }}">Website</label>
    {{ register_user_form.website(class="form-control", tabindex="-1", autocomplete="off") }}
  </div>
  {{ wtf.form_field(register_user_form.username) }}
  {{ wtf.form_field(register_user_form.email) }}
  {{ wtf.form_field(register_user_form.password) }}
  {% if register_user_form.password_confirm %}
    {{ wtf.form_field(register_user_form.password_confirm) }}
  {% endif %}
  {{ wtf.form_field(register_user_form.submit, button_map={'submit': 'primary'}) }}
</form>
{% endblock %}