schemas, autoform, other code cleanup, require logged in for all server methods