Authorization for submission api resource works, and allows only a logged in
user to access their own submissions. Some untested code for creating and updating submission resources.