fix requirement flask-wtf
validate folder name
url_for accommodates node types too
use url_for in templates
make publish stuff as a mixin. huh.