confirm() with input type= submit doesn't cancel