don't allow the user to spoof their userid in setting change messages
Merge pull request #1 from db48x/connectionid

don't allow the user to spoof their userid in setting change messages