As recommended you should add reject_sender_login_mismatch to your sender_restrictions to only allow users to send with their own address as FORM.