default to using basic authentication for non-j2me secure submissions

Definitely looks good to me. Good catch on SymbOS.