thanks Ian
yes that was the problem... the "key" field was created automatically by my database. Very dumb.
Still can't get security features to work properly... and I'm not sure the update feature is working properly because the order number does not show when the form loads. And when you press update, it produces a blank page: requests_update.php...