use ajax to stop cms users from adding/removing settings they shouldn't
bugfix-add-remove-setting-fix merged into bugs; resolves #7