use api queries for select and multiple_select, other form fixes and enhancements, query fix for permissions