submit data, authorized user, flash message