Do not pass more options that are needed.

We only need action and method so pass them explicitly instead of
merging the hash with HTML options.

actionview/lib/action_view/helpers/url_helper.rb

@@ -312,7 +312,7 @@ module ActionView
         form_options[:'data-remote'] = true if remote
 
         request_token_tag = if form_method == 'post'
-          token_tag(nil, form_options: form_options.merge(method: method))
+          token_tag(nil, form_options: { action: url, method: method })
         else
           ''
         end