Removed insecure user id hidden input in settings.
Merge remote-tracking branch 'upstream/master'