preventing milestones from inadvertently being submitted twice
milestone locations are optional, and we don’t output them if they’re not present
adding sidebar to password requested page