SECURITY: fix ability to set submitterID via form data