add less restrictive access on case upload
make case list keep track of what it's already sent