added ability to edit and delete request error code entries

changed firstname_format.yml config to AoA and corresponding Base::_format_first_name() method - both made easier to comprehend

added format_firstname callback in templates to enable user-configurable special formatting to first_name - uses format_first_name sub in render_view + format_firstname.yml; changed user_location.region_code to varchar(5) to allow longer parent organisation codes

new histology samples cron script

minor bufixes & core data update for production server

bugfixes to test suite

minor change to HMRN add new treatment details - redirects with flash message instead of silent forward; hilis3_convert users changes

added ENV variable DB_SESSIONS to force dev server to use db instead of file store for sessions; moved _update_session_userid flag to top of block in cgiapp_prerun so only have to set it once for both new logins & re-authenication after timeout & removed it from _create_user_profile()

set flag in cgiapp_prerun() to update sessions.userid on re-authentication after a session timeout, as session is deleted & re-created (without userid) - still needs more worksvk_diff

patched C::Resources::active_sessions() again to use CAP::Authen method of calculating expired sessions, not CGI::Session etime (ie 86400 seconds for all users)

patched C::Resources::active_sessions() to use 4th parameter to args to CGI::Session::load() to avoid updating session atime which acts as keep-alive for all sessions - REQUIRES CGI::Session VERSION >4.40

added ability to p.m. users in "who's logged in" page; modified M::Base::get_objects_with() to use same logic as M::Base::get_objects()

bugfixes to allow test suite to pass

added ability to restrict non-network users to own records; added missing _debug_path() to controller methods

minor bugfixes & tweaks