finish study access controls; minor tweaks