authenticate_user filter does not error out if no submission