whitelist ip addrs until I feel more confident about mtg
better ajaxy autocomplete, pretty styles