[wip] default to using basic authentication for secure submissions

@ctsims check out the below and see if you think this is sufficient. I grabbed strings from your URLs and then manually commented the ones that didn't pass (and seemed ok that they weren't passing)