stopwords; cleanup of upload.xql; hiding collections from guest