Changing signoff form and expose/hide button on the superevent
web display to make an AJAX request to the relevant API endpoints.
This way, we don't have to maintain separate permissions and views
for web resources.