added ability for api alerts in appfirst. Also fixed a few security holes