[tgirotto]

how does the api handle auth though?

[eiiot]

It doesn't! It's simply filling out the public version of the form, which shouldn't require authentication.