add basic authentication and make it the default for secure submissions

I think this line should use `.split(':', 1)` since I believe it is legal to have a colon (`:`) in the password.