bugfixes

make viewrequest use logged-in user as employee
make all queries fail on unparseable grant name