adding new lists works. fixed validate_on_submit() issue (needed form.hidden_tag() for csrf verification). lists seem to properly return only suspects they are tracking.