CRUD mostly working. next major step- add security gateway for admin