PLD: remove require_auth check as it happens after the submission
PLD: test for submit to require_auth as anon and non authed user, skip test for authed user
PLD: assume xform and request exist (we do later anyhow) and check for require_auth on xform