use dids everywhere

appview/pages/knot.html

···
     <p>
       <code>
         opened by: {{.Registration.ByDid}}
-        {{ if $.IsOwner }}
+        {{ if eq $.User.Did $.Registration.ByDid }}
         (you)
         {{ end }}
       </code><br>
···
 
     {{ if .Registration.Registered }}
     <h3> members </h3>
-    {{ range $.Members }}
     <ol>
+    {{ range $.Members }}
       <li>{{.}}</li>
-    </ol>
     {{ else }}
     <p>no members</p>
     {{ end }}
     {{ end }}
+    </ol>
 
     {{ if $.IsOwner }}
-    <a href="/knots/{{.Registration.Domain}}/member">add member</a>
+    <h3>add member</h3>
+    <form hx-put="/knots/{{.Registration.Domain}}/member">
+        <label for="member">did or handle:</label>
+        <input type="text" id="member" name="member" required>
+        <button type="text">add member</button>
+    </form>
     {{ end }}
 {{end}}

appview/pages/knots.html

···
     <form hx-post="/knots/key">
         <label for="domain">domain:</label>
         <input type="text" id="domain" name="domain" required>
-
-        <button type="domain">generate key</button>
+        <button type="text">generate key</button>
     </form>
 
     <h3>my knots</h3>
···
         {{range .Registrations}}
         {{ if .Registered }}
             <li>
-                <p>domain: <a href="/knots/{{.Domain}}">{{.Domain}}</a></p><br>
+                <code>domain: <a href="/knots/{{.Domain}}">{{.Domain}}</a></code><br>
                 <code>opened by: {{.ByDid}}</code><br>
                 <code>on: {{.Created}}</code><br>
                 <code>registered on: {{.Registered}}</code>
···
         {{range .Registrations}}
         {{ if not .Registered }}
             <li>
-                <code>domain: {{.Domain}}</code><br>
+                <code>domain: <a href="/knots/{{.Domain}}">{{.Domain}}</a></code><br>
                 <code>opened by: {{.ByDid}}</code><br>
                 <code>on: {{.Created}}</code><br>
                 <code>pending registration</code>

appview/state/state.go

···
 		return
 	}
 
-	// TODO: validate member did?
 	memberIdent, err := auth.ResolveIdent(r.Context(), memberDid)
 	if err != nil {
 		w.Write([]byte("failed to resolve member did to a handle"))
···
 
 	log.Printf("adding %s to %s\n", memberIdent.Handle.String(), domain)
 
-	err = s.enforcer.AddMember(domain, memberDid)
+	err = s.enforcer.AddMember(domain, memberIdent.DID.String())
 	if err != nil {
 		w.Write([]byte(fmt.Sprint("failed to add member: ", err)))
 		return