change status string field to complete boolean field, add update authorization on everything for admin
convert another instance of status to complete