admin-update
prefill
add sha256 nonsense
remove signature pad
update validation; a million hacks for new db