commonize exhibition method (function exhibit())
modify exhibit() and exhibit_from_app() / add parameters / make exhibit_from_app secure