fixed small bug where needed to run hessian unless cov.user supplied
updated checklist, added a few new items