cleanup
1) disable csrf prot 2) debugging
delete appeal after confirmation
embed messagetypes in appeals
notify both users on double match
send appealing friend's status in initial notification