stricter checks for kappa phi values
move to proper session table
unhide errors for callout / ehc log
Projects can now have users