Rewrite author to actual author on changes

This reverts the security patch but makes any changes come from the author, so it's a bit more strict/secure but it works great.

This fixes #1696 but right now the authors UI isn't updated the same as the recipient so that's next to do..  Not sure how that is handled though..  

I probably need some help updating the author/senders UI to be the same as the recipients..  

UPDATE: So it turns out we'd rather do this properly on the client but doing it on the client is kinda difficult so imho this is a good temporary measure for people who want to apply this patch and wait a week or so for a perma-fix