Limit pgp edits to pgp creator, replace pgp-routes mongoose code with corngoose
make pgp editable by creator only server side, more mongoose to corngoose transfers close #36