Now only allowing forms with userID `demo_user` to be submitted with noauth