diff --git a/go.mod b/go.mod
index ae4ae8328..bfa8b5019 100644
--- a/go.mod
+++ b/go.mod
@@ -18,7 +18,7 @@ require (
 	github.com/SentimensRG/ctx v0.0.0-20180729130232-0bfd988c655d
 	github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d
 	github.com/brianvoe/gofakeit/v6 v6.5.0
-	github.com/cortezaproject/corteza-locale v0.0.0-20211107083849-eaef5250945f
+	github.com/cortezaproject/corteza-locale v0.0.0-20211122123708-d5c179b9eb73
 	github.com/crewjam/saml v0.4.5
 	github.com/crusttech/go-oidc v0.0.0-20180918092017-982855dad3e1
 	github.com/davecgh/go-spew v1.1.1
diff --git a/go.sum b/go.sum
index e60671244..9fb3718d6 100644
--- a/go.sum
+++ b/go.sum
@@ -90,6 +90,8 @@ github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDk
 github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
 github.com/cortezaproject/corteza-locale v0.0.0-20211107083849-eaef5250945f h1:Um1MzR3A18FfvVWQ9teOckIii6EHYUHxb6ZYfTiO6c8=
 github.com/cortezaproject/corteza-locale v0.0.0-20211107083849-eaef5250945f/go.mod h1:wsI1UftEdBqTuEDKBZmx2LfNu/kZun5pRbCAi420JCg=
+github.com/cortezaproject/corteza-locale v0.0.0-20211122123708-d5c179b9eb73 h1:11xTWL1FafVJk4MZTjZPMLWyw8MfH24+FSjwyawXLk0=
+github.com/cortezaproject/corteza-locale v0.0.0-20211122123708-d5c179b9eb73/go.mod h1:wsI1UftEdBqTuEDKBZmx2LfNu/kZun5pRbCAi420JCg=
 github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
 github.com/crewjam/httperr v0.0.0-20190612203328-a946449404da h1:WXnT88cFG2davqSFqvaFfzkSMC0lqh/8/rKZ+z7tYvI=
 github.com/crewjam/httperr v0.0.0-20190612203328-a946449404da/go.mod h1:+rmNIXRvYMqLQeR4DHyTvs6y0MEMymTz4vyFpFkKTPs=
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/de/corteza-webapp-admin/system.settings.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/de/corteza-webapp-admin/system.settings.yaml
index 1a45672a6..ca668ea4a 100644
--- a/vendor/github.com/cortezaproject/corteza-locale/src/de/corteza-webapp-admin/system.settings.yaml
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/de/corteza-webapp-admin/system.settings.yaml
@@ -5,6 +5,15 @@ editor:
       enabled: Internal authentication enabled
       password-reset:
         enabled: Password reset enabled
+      password-constraints:
+        title: Password constraints
+        ignored-security: The system is configured to ignore password security constraints which is insecure on production deployments. If this is a production deployment, please contact your administrator to update the system configuration (the AUTH_PASSWORD_SECURITY .env variable).
+        min-length: Minimum length
+        min-length-description: Must be at least 8 characters
+        min-num-count: Minimum number of numbers
+        min-num-count-description: The password must include the specified number of numbers (disabled if set to 0)
+        min-special-count: Minimum number of special characters
+        min-special-count-description: The password must include the specified number of special characters (disabled if set to 0)
       signup:
         email-confirmation-required: Signup email confirmation required
         enabled: Signup enabled
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-admin/system.apigw.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-admin/system.apigw.yaml
index 598373e48..7bf4f226a 100644
--- a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-admin/system.apigw.yaml
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-admin/system.apigw.yaml
@@ -107,7 +107,7 @@ editor:
     params: 'Params'
     filterListEmpty: 'Filter list is empty!'
 
-    headerExamples:
-      first: Connection == "keep-alive"
-      second: (Content-Type == "application/x-www-form-urlencoded") AND (Accept-Encoding == "gzip, deflate, br")
-      more:  More examples..
+    help:
+      expression:
+        example: Example == "match string" && match(SecondParam, "^foo\\s.*$")
+        link: Documentation
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-admin/system.authclients.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-admin/system.authclients.yaml
index 19760b224..c31d9e2e3 100644
--- a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-admin/system.authclients.yaml
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-admin/system.authclients.yaml
@@ -55,6 +55,7 @@ editor:
     hideCurl: Hide cURL snippet
     cUrl: Generated cURL
     testCurl: Test auth
+    discovery: Allow client access to Corteza Discovery API on behalf of user
   new: New
   permissions: Permissions
   title:
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-admin/system.settings.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-admin/system.settings.yaml
index 5c028c62c..3a7f340b7 100644
--- a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-admin/system.settings.yaml
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-admin/system.settings.yaml
@@ -8,6 +8,15 @@ editor:
       enabled: Internal authentication enabled
       password-reset:
         enabled: Password reset enabled
+      password-constraints:
+        title: Password constraints
+        ignored-security: The system is configured to ignore password security constraints which is insecure on production deployments. If this is a production deployment, please contact your administrator to update the system configuration (the AUTH_PASSWORD_SECURITY .env variable).
+        min-length: Minimum length
+        min-length-description: Must be at least 8 characters
+        min-num-count: Minimum number of numbers
+        min-num-count-description: The password must include the specified number of numbers (disabled if set to 0)
+        min-special-count: Minimum number of special characters
+        min-special-count-description: The password must include the specified number of special characters (disabled if set to 0)
       signup:
         email-confirmation-required: Signup email confirmation required
         enabled: Signup enabled
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-discovery/filters.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-discovery/filters.yaml
index be0a7bc7f..4a84eb698 100644
--- a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-discovery/filters.yaml
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-discovery/filters.yaml
@@ -1,7 +1,12 @@
 title: Filter
+
 types:
   title: Types
   namespace: Namespace
   module: Module
   user: User
-  record: Record
\ No newline at end of file
+  record: Record
+
+aggregation-groups:
+  modules: Modules
+  namespaces: Namespaces
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/configurator.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/configurator.yaml
index 6967893c6..bf0a7063d 100644
--- a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/configurator.yaml
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/configurator.yaml
@@ -1,3 +1,8 @@
+configuration: Configuration
+edge: Edge
+target: Target
 workflow:
+  'run-as': Run as
+  'not-setup-properly': When not explicitly set, workflow will be executed by user that invoked it
   invalid-handle-characters: Should be at least 2 characters long and start with a letter. Can contains only letters, numbers, dash, underscore and dot
-  placeholder-handle: handle (a - z, 0 - 9, underscore, dash)
\ No newline at end of file
+  placeholder-handle: handle (a - z, 0 - 9, underscore, dash)
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/editor.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/editor.yaml
new file mode 100644
index 000000000..f73594817
--- /dev/null
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/editor.yaml
@@ -0,0 +1,31 @@
+
+'auto-initialize-empty-variable': Variables that can't be loaded will be auto initialized as empty
+back: Back
+'click-to-save': Click here to save.
+deferred: Deferred
+delete: Delete
+deleted: Deleted
+'detected-changes': "Changes detected "
+'detected-issues': Issues detected
+disabled: Disabled
+help: Help
+handle: (Handle)
+id: "ID:"
+'id-parenthesis': " (ID)"
+'initial-scope': Initial scope
+'input-ids-or-handles': The initial scope gets injected into the workflow at execution. To load available variables, input the related IDs/Handles below
+issues: Issues
+'load-and-configure': Load and Configure
+'modify-initial-scope-if-no-variables-are-loaded': If you do not wish to load any variables, click "Configure" to modify the initial scope before running workflow
+'open-webapp-on-prompt-use' : "WARNING: If prompts are used in the workflow, make sure that the related webapp is also opened. Otherwise workflow will timeout"
+reset: Reset
+'run-as': "Run as:"
+'run-workflow': Run Workflow
+'required-namespace': Namespace required
+'required-namespace-and-module': Namespace and Module required
+save: Save
+spinning: Spinning
+'test-in-progress': "Testing in progress. If your workflow includes Prompt or Delay steps, it may be waiting for them to complete"
+'unsupported-browser': Browser is not supported!
+'workflow-configuration': Workflow Configuration
+'editor': Editor
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/general.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/general.yaml
new file mode 100644
index 000000000..a1caf25c6
--- /dev/null
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/general.yaml
@@ -0,0 +1,22 @@
+description: Description
+enabled: Enabled
+error: Error
+'error-expression': Error message(expression)
+export: Export
+general: General
+handle: Handle
+import:
+  json: Import JSON
+  label: Import
+  'reassign-run-as': "NOTE: the Run as workflow property won't be imported and should be reassigned"
+  'upload-files': Browse or drop files to upload...
+label: Label
+name: Name
+'new-workflow': New Workflow 
+offset: Offset
+permissions: Permissions
+'search-workflows': Type here to search all workflows...
+'unnamed-workflow': Unnamed Workflow
+'workflow-list': List of Workflows
+save: Save
+cancel: Cancel
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/help.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/help.yaml
new file mode 100644
index 000000000..b88bd70dc
--- /dev/null
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/help.yaml
@@ -0,0 +1,37 @@
+'basic-controls':
+  action:
+    deselect: Deselect
+    pan: Pan
+    select: Select
+    'select-multiple': Select multiple
+    'zoom-in/out': Zoom in/out
+  shortcut:
+    'left-click': 
+      background: Left click on background
+      drag: Left click & drag
+      label: Left click
+    'mouse-wheel': Mouse wheel
+    'right-click-drag': Right click & drag
+'basic-controls-label': Basic controls
+'keyboard-shortcuts':
+  action:
+    'add-selection': Add to selection
+    copy: Copy
+    cut: Cut
+    'delete-selected-elements': Delete selected elements
+    nudge: Nudge
+    paste: Paste
+    redo: Redo
+    save: Save
+    'show-guides': Show guides
+    'show-help': Show help
+    'reset-view-to-start-point': Reset view to starting point
+    'select-all': Select all
+    undo: Undo
+  shortcut:
+    'adjust-distance': to adjust distance
+    'arrow-keys': Arrow keys - Use
+    hold: Hold
+    'left-mouse-button': left mouse button
+'keyboard-shortcuts-label': Keyboard shortcuts
+'mac-users': If using a MAC keyboard, replace Ctrl with the CMD key
\ No newline at end of file
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/notification.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/notification.yaml
new file mode 100644
index 000000000..21aaeec10
--- /dev/null
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/notification.yaml
@@ -0,0 +1,35 @@
+'configure-triggers': Make sure all trigger steps are properly configured
+'confirm-unsaved-changes': You have unsaved changes, are you sure you want to exit?
+'delete-failed': Failed to delete workflow
+'deleted-workflow': Workflow deleted
+error: " - ERROR: "
+'event-type-not-found': Event type not found
+'event-type-fetch-failed': Failed to fetch event types
+'failed-fetch-functions': Failed to fetch functions
+'failed-fetch-triggers': Failed to fetch triggers
+'failed-fetch-workflow': Failed to fetch workflow
+'failed-fetch-workflows': Failed to fetch workflows
+'failed-load-file': Failed to load file
+'failed-save': Save failed
+'failed-test': Test failed
+'fetch-types-failed': Failed to fetch types
+general:
+  error: Error
+  success: Success
+  warning: Warning
+import:
+  'failed-import': Failed to import
+  'imported-workflows': Workflows imported
+  'skipped-workflows': Skipped workflows
+'imported-workflow': Workflow imported
+'import-failed': Import failed
+'initial-scope-load-failed': Failed to load initial scope
+'resolve-issues': Resolve issues to test workflow
+'save-workflow': Save workflow first to test it
+'started-test': Workflow test started
+'test-completed': Test completed
+'test-in-progress': Test in progress
+'trace-unavailable': Trace not available
+'trigger-paths-changed': Trigger paths changed
+'updated-workflow': Workflow updated
+'workflow-test-completed': Workflow test completed
\ No newline at end of file
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/steps.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/steps.yaml
new file mode 100644
index 000000000..20517fb18
--- /dev/null
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/en/corteza-webapp-workflow/steps.yaml
@@ -0,0 +1,82 @@
+break:
+  label: Break
+  tooltip: Stop iterator execution and continue with workflow
+continue:
+  label: Continue
+  tooltip: Stop current iteration and continue with the next one
+debug:
+  label: Debug
+  tooltip: Logs current workflow scope into server logs. If workflow debug is enabled
+delay:
+  label: Delay
+  tooltip: Delays workflow execution
+error:
+  label: Error 
+  tooltip: Throws error and stops workflow execution, also prevents saving of records triggered with before trigger
+'error-handler':
+  label: Error Handler
+  tooltip: Continue workflow from this step if an error is triggered
+expressions:
+  configurator:
+    'add-expression': + Add Expression
+    expression: Expression
+    'expression-placeholder': Expression...
+  label: Expressions
+  tooltip: Define and mutate scope variables
+function:
+  configurator:
+    arguments: Arguments
+    constant: Constant
+    expression: Expression
+    name: Name
+    'option-select': Select an option
+    result: Result
+    results: Results
+    'select-function': Select function
+    type: Type
+    'type*': 'Type*'
+  label: Function
+  tooltip: Execute the chosen predefined function
+gatewayExclusive:
+  label: Gateway (Exclusive)
+  tooltip: Workflow execution can continue on first path that fits condition
+gatewayInclusive:
+  label: Gateway (Inclusive)
+  tooltip: Workflow execution can continue on all paths that fit condition
+gatewayParallel:
+  label: Gateway (Fork/Join)
+  tooltip: Splits workflow execution into two parallel paths or merges multiple paths into one
+gateway:
+  configurator:
+    condition: Condition
+    'two-paths': Gateway must be source of at least two paths
+iterator:
+  label: Iterator
+  tooltip: Iterate over items
+prompt:
+  label: Prompt
+  tooltip: Prompts user and waits for input
+swimlane:
+  label: Swimlane
+  tooltip: Visually group steps
+termination:
+  label: Termination (End)
+  tooltip: Terminate workflow execution
+trigger:
+  configurator:
+    add: + Add
+    'add-constraints': + Add Constraints
+    constraints: Constraints
+    'event*': 'Event*'
+    'failed-fetch-event-types': Failed to fetch event types
+    'initial-scope': Initial Scope
+    like: Like
+    'not-like': Not like
+    operator: Operator
+    resource:  Resource
+    'resource*':  'Resource*'
+    'select-constraint-type': Select constraint type
+    'select-event-type': Select event type
+    'select-resource-type': Select resource type
+  label: Trigger (Start)
+  tooltip: Trigger the workflow execution based on configuration
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/ro/corteza-webapp-admin/system.settings.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/ro/corteza-webapp-admin/system.settings.yaml
index 1a45672a6..ca668ea4a 100644
--- a/vendor/github.com/cortezaproject/corteza-locale/src/ro/corteza-webapp-admin/system.settings.yaml
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/ro/corteza-webapp-admin/system.settings.yaml
@@ -5,6 +5,15 @@ editor:
       enabled: Internal authentication enabled
       password-reset:
         enabled: Password reset enabled
+      password-constraints:
+        title: Password constraints
+        ignored-security: The system is configured to ignore password security constraints which is insecure on production deployments. If this is a production deployment, please contact your administrator to update the system configuration (the AUTH_PASSWORD_SECURITY .env variable).
+        min-length: Minimum length
+        min-length-description: Must be at least 8 characters
+        min-num-count: Minimum number of numbers
+        min-num-count-description: The password must include the specified number of numbers (disabled if set to 0)
+        min-special-count: Minimum number of special characters
+        min-special-count-description: The password must include the specified number of special characters (disabled if set to 0)
       signup:
         email-confirmation-required: Signup email confirmation required
         enabled: Signup enabled
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/sl/corteza-webapp-admin/system.settings.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/sl/corteza-webapp-admin/system.settings.yaml
index 1a45672a6..ca668ea4a 100644
--- a/vendor/github.com/cortezaproject/corteza-locale/src/sl/corteza-webapp-admin/system.settings.yaml
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/sl/corteza-webapp-admin/system.settings.yaml
@@ -5,6 +5,15 @@ editor:
       enabled: Internal authentication enabled
       password-reset:
         enabled: Password reset enabled
+      password-constraints:
+        title: Password constraints
+        ignored-security: The system is configured to ignore password security constraints which is insecure on production deployments. If this is a production deployment, please contact your administrator to update the system configuration (the AUTH_PASSWORD_SECURITY .env variable).
+        min-length: Minimum length
+        min-length-description: Must be at least 8 characters
+        min-num-count: Minimum number of numbers
+        min-num-count-description: The password must include the specified number of numbers (disabled if set to 0)
+        min-special-count: Minimum number of special characters
+        min-special-count-description: The password must include the specified number of special characters (disabled if set to 0)
       signup:
         email-confirmation-required: Signup email confirmation required
         enabled: Signup enabled
diff --git a/vendor/github.com/cortezaproject/corteza-locale/src/uk/corteza-webapp-admin/system.settings.yaml b/vendor/github.com/cortezaproject/corteza-locale/src/uk/corteza-webapp-admin/system.settings.yaml
index 1a45672a6..ca668ea4a 100644
--- a/vendor/github.com/cortezaproject/corteza-locale/src/uk/corteza-webapp-admin/system.settings.yaml
+++ b/vendor/github.com/cortezaproject/corteza-locale/src/uk/corteza-webapp-admin/system.settings.yaml
@@ -5,6 +5,15 @@ editor:
       enabled: Internal authentication enabled
       password-reset:
         enabled: Password reset enabled
+      password-constraints:
+        title: Password constraints
+        ignored-security: The system is configured to ignore password security constraints which is insecure on production deployments. If this is a production deployment, please contact your administrator to update the system configuration (the AUTH_PASSWORD_SECURITY .env variable).
+        min-length: Minimum length
+        min-length-description: Must be at least 8 characters
+        min-num-count: Minimum number of numbers
+        min-num-count-description: The password must include the specified number of numbers (disabled if set to 0)
+        min-special-count: Minimum number of special characters
+        min-special-count-description: The password must include the specified number of special characters (disabled if set to 0)
       signup:
         email-confirmation-required: Signup email confirmation required
         enabled: Signup enabled
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 79ec97e34..65fdad87e 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -44,7 +44,7 @@ github.com/brianvoe/gofakeit/v6
 github.com/brianvoe/gofakeit/v6/data
 # github.com/cespare/xxhash/v2 v2.1.1
 github.com/cespare/xxhash/v2
-# github.com/cortezaproject/corteza-locale v0.0.0-20211107083849-eaef5250945f
+# github.com/cortezaproject/corteza-locale v0.0.0-20211122123708-d5c179b9eb73
 ## explicit
 github.com/cortezaproject/corteza-locale
 # github.com/crewjam/httperr v0.0.0-20190612203328-a946449404da