fix league visibility/writability in :leagueId param middleware
various fixes