in the documentation i read that anyone who will be
added after submitting something via mail will be added
to the user list with an empty password thus not
permitting them to login. now this is exactly what we
want here but it just doesn't work.

after submitting i can login with the email address i
sent the request from and just hit enter as password.
voila, i can edit everything.

sorry for not finding a solution myself but my python
skills are far from sufficient ...