email: accept authenticated clients only on submission