Web-app: fixed input names
Web-app: no upper limit on password length
it's hashed anyway...
Web-app: radio boxes for "hasGrant"