Explicitly allow anonymous data submissions, closes #41.

This just encodes the status quo more clearly. We allow access to the
submit API without or even with unknown API keys.