can now unhide patients, todo: security restrictions to only allow superadmins to unhide