add spctl verification
rename update.sh to prepareUpdate.sh
use app's name rather than hardcoded