do not show app source to non-editors; fixing showPopup and adding the_app.app.alert()