Regarding "Password" does that mean that only users with an account can submit an assessment?
What would be needed is rather a default user who requires no login but must provide a unique transaction number that can only be used once to submit an assessment.
So the quest is whether assessment accepts multiple submits from a single account or from a user without an account and instead checks against a list of valid transaction numbers assigned to it.