separate files into third_party and themes folders
simplify the _get_act method by using the built-in fetch_action_id function instead of a custom db query
add conditional in case of no groups being checked for using duo authentication (before this was added, if no checkboxes were checked a php error was shown because the POST variable was undefined)
stop the click event on the test link from bringing user to the top of the page
rework fronted paths to be dynamically generated and to look better with the cp login screen
remove as much html from the extension file as possible, moving it to the views

clarify some of the comments

add ip whitelisting