-<h1>Editing <%= @candidate.name %></h1>
+<h1>Editing <%=h @candidate.name %></h1>
-<%= error_messages_on :candidate %>
-
-<%= form_tag :action => 'update_candidate', :id => @candidate.id %>
- <%= render :partial => 'candidate_form' %>
- <%= submit_tag "Done!" %>
-<%= end_form_tag %>
+<%= error_messages_for :candidate %>
+<% form_tag( { :action => :update_candidate, :id => @candidate.id },
+ :multipart => true ) do %>
+<%= render :partial => 'candidate_form' %>
+<%= submit_tag "Save" %>
+<% end %>