network panel refactored -- deny works now, grant search form, etc; more beta route redirects