support authenticated submissions, fixes #3