publish userdata for permissions to client.
previous commit removed.  Bad idea- would create a lot of traffic; better to run permissions on both sides.
Move form to meteorboard template.  Set show form button to toggle show/hide form.