add basic authentication and make it the default for secure submissions








:tongue: