make submit_forms_locally more flexible

  - allows you to pass in kwargs that get passed on, e.g. received_on
  - does not force attachment to be {}; this is the default anyway
  - does not force auth_context to be DefaultAuthContext()