Revamped UserController filters (to prevent access to client settings by unprivileged users).