patients integrity and security checks and minor UI improvements

create a log entry on removePatient
force user to enter a reason on removePatient if patient has answers
include a patient again after excluding
save multiple include / exclude reasons (only display last exclude reason for now)
attach schema to patients collection
permission checks