Post to /api/submission/ is largely functional, needs a lot of work still.
Changed BasicAuth into MultiAuth to use both session and basic. This probably will also need to change.