add basic authentication and make it the default for secure submissions

lotsa blank lines