**Issue** : any user (author, because in current implementation any user can be **author**) can change site settings To deal with it, we need introduce roles. At least we need **admin**/**owner** and **author**. Maybe, **user** role (which is not author) needed as well