bugfixes: vestigial g.roots in user.py, and /settings route typo.