add invalidate CDN distribution method
decorate file fields, allow edits to file
admin can edit libraries she doesn't own