add team_id everywhere and scope everything by current_team for better security