API need proper authorization method.
LB-811 Submit listens with OAuth
LB-135 User token shouldn't be on the import page