Require authentication for submission API

Also, allow users and entities to have a relation to one another which 
can be used to automatically assign submitter/recipient entities.