Fix audit list things

Also, ensure `Request.requestor` is set correctly in imports and client-side creation