add false positive category, closes #210
correct the label for closed incident, closes #209