UK: username could be None, remove form user check
UK: refactor: function to inject uuid into test submissions
UK: test for /submission endpoint for authenticated users