redirect regular users to login page if they try to edit web user registration unauthorized

(instead of throwing an error)
update settings_base to log_level warning