add some jsonEscaping
not choosing from std templates for contact/passport/payment; 'is' and 'tag' added to responses