fix missing id=theBody
allow fine-grained privilege control when creating new items
dont use incomplete url as default
allow per-field filters in filters_person_prepare
teaching survey: init year and term from http when creating new entry
(only relevant for coordinator - for all others, only $teaching_survey_{year|term} will be allowed)