require authentication for submit, account login over JSON api