Fix authchecking in /toursettings