prevent direct access
updated plugin settings link