only allow changing of options if the user can 'manage_options'