moved session fields out of the corpus doc and used the ones from the session template so we dont have to copy paste them around. added toLowerCase on the server code in case calling apps send a mixed case string.
while cleaning up the dbConnection ambiguity i found a security flaw and turned off the updateroles API for now, @senhorzinho hope this doesnt affect the spreadsheet lauch too much.
Reverting back to active code before pulling new admin checking function.
factoring out the is user admin on corpus logic so it can be reused in multiple functions
Merge branch 'usercreationrefactor' of https://github.com/cesine/AuthenticationWebService into usercreationrefactor
Moved and edited isRequestingUserAnAdminOnCorpus function to test to see if requesting user is admin before allowing user to change roles.