fixed updating recipients, moved allowed_ext to helpers