user must be authenticated to post a submission